Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
[email protected] and lower versions are vulnerable to denial of service via uncaught exception. By sending a multipart/form-data request with a Content-Disposition header whose filename* parameter contains a malformed percent-encoding, the parser invokes decodeURI on the value without try/catch. The resulting URIError propagates as an uncaught exception and crashes the process. Impact: any service accepting multipart uploads via multiparty is affected. Workarounds: none. Upgrade to [email protected] or higher.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-8162 Denial of Service via Uncaught Exception in Multiparty 4.2.3 and Lower https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-8162
Post summary
CVE-2026-8162 describes a denial‑of‑service flaw caused by an uncaught exception in Multiparty 4.2.3 and earlier, with technical details presented but no poC, exploit, or mitigation outlined.
🚨 High-severity security fix in multiparty@4.3.0 just released! Patches CVE-2026-8162 — multiparty vulnerable to Denial of Service via Uncaught Exception in filename* parameter parsing https://github.com/pillarjs/multiparty/security/advisories/GHSA-xh3c-6gcq-g4rv
Post summary
A high‑severity patch for multiparty 4.3.0 addressing CVE‑2026‑8162, a denial‑of‑service flaw caused by an uncaught exception during filename parsing, has just been released.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | pillarjs | multiparty | - | node.js | - |