Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
AdonisJS is a TypeScript-first web framework. Prior to versions 10.1.3 and 11.0.0-next.9, a denial of service (DoS) vulnerability exists in the multipart file handling logic of @adonisjs/bodyparser. When processing file uploads, the multipart parser may accumulate an unbounded amount of data in memory while attempting to detect file types, potentially leading to excessive memory consumption and process termination. This issue has been patched in versions 10.1.3 and 11.0.0-next.9.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
| Date | Total | Labels |
|---|
| 2026-02-06 | 1 | Disclosure1 |
| 2026-02-08 | 1 | Disclosure1 |
| 2026-02-16 | 1 | General1 |
CVE-2026-25762 AdonisJS is a TypeScript-first web framework. Prior to versions 10.1.3 and 11.0.0-next.9, a denial of service (DoS) vulnerability exists in the multipart file handlin… https://www.cve.org/CVERecord?id=CVE-2026-25762
Post summary
CVE-2026-25762 is a denial of service vulnerability in AdonisJS’s multipart file handling, affecting versions prior to 10.1.3 and 11.0.0-next.9.
https://github.com/ZeroXJacks/CVEs/blob/main/CVE-2026-25762.md https://nvd.nist.gov/vuln/detail/CVE-2026-25762 https://t.co/E4PEm6xtn7
Post summary
The text includes links to a CVE description and NVD entry but offers no explicit details, PoC, exploit code, or mitigation information.
CVE-2026-25762: Infinite Stream of Death: Crashing AdonisJS with Unbounded Buffers A classic but devastating Denial of Service vulnerability in the AdonisJS framework's `@adonisjs/bodyparser` package. By exploiting the multipart file parser's eagernes... https://cvereports.com/reports/CVE-2026-25762
Post summary
CVE-2026-25762 is a denial‑of‑service flaw in AdonisJS’s bodyparser due to unbounded buffers in multipart parsing; no PoC, exploit, or patch details are provided.
9 of 9 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | adonisjs | bodyparser | - | node.js | - |
| App | adonisjs | bodyparser | 11.0.0 | node.js | - |
| App | adonisjs | bodyparser | 11.0.0 | node.js | - |
| App | adonisjs | bodyparser | 11.0.0 | node.js | - |
| App | adonisjs | bodyparser | 11.0.0 | node.js | - |
| App | adonisjs | bodyparser | 11.0.0 | node.js | - |
| App | adonisjs | bodyparser | 11.0.0 | node.js | - |
| App | adonisjs | bodyparser | 11.0.0 | node.js | - |
| App | adonisjs | bodyparser | 11.0.0 | node.js | - |