VYPR

Express Fileupload

by Richardgirges

Source repositories

CVEs (1)

  • CVE-2020-7699HigJul 30, 2020
    risk 0.42cvss 7.5epss 0.05

    This affects the package express-fileupload before 1.1.8. If the parseNested option is enabled, sending a corrupt HTTP request can lead to denial of service or arbitrary code execution.