HIGH
multiparty
CVE published 2026-09-11
CVE-2026-87908
CVE-2026-87908 multiparty Denial of Service: The multiparty library for Node.js is vulnerable to a denial of service attack due to unbounded memory usage while accumulating headers of a single multipart part. An unauthenticated attacker can send a request with a large volume of header bytes, causing the parser to buffer all of them and exhausting the process memory, which crashes the server. This issue is [truncated]