-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe vulnerability documentation explicitly identifies saveRequestFiles as the problematic function. The CWE-770 mapping confirms this is a resource management issue, and the GitHub PR #567 shows the fix involved adding cleanup logic to handle aborted requests. The workaround ('Do not use saveRequestFiles') further corroborates this function's central role in the vulnerability. While the exact file path isn't explicitly stated in the provided data, Fastify plugin conventions suggest index.js as the primary entry point for multipart handling logic.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| @fastify/multipart | npm | <= 8.3.0 | 8.3.1 |
| @fastify/multipart | npm | >= 9.0.0, < 9.0.3 | 9.0.3 |
JavaScriptJavaScriptOngoing coverage of React2Shell