high7.5
CVE-2020-8136
Uncontrolled Resource Consumption in fastify-multipart
Impact
Prototype pollution vulnerability in `fastify-multipart` < 1.0.5 allows an attacker to crash fastify applications parsing multipart requests by sending a specially crafted request.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| npm | fastify-multipart | < 1.0.5 | 1.0.5 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Fastify | Fastify-Multipart | before 1.0.5 |