santihabib/multer-CVE-2026-113872

PoC

Write-up and proof of concept for CVE-2026-113872: multer async fileFilter process crash (DoS)

view exploit source poc_in_githubauthor santihabibpublished 2026-10-23catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2026-113872US	—	0.44% (38th)	Exploit	2026-10-22
multer is a middleware for Node.js that handles multipart/form-data file uploads. In versions from 2.0.0 before 2.5.0, when multer is configured with an asynchronous fileFilter, a…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.