adonisjs/core Security Advisories | GitStock

high2026-06-30

@adonisjs/bodyparser has an incomplete fix for CVE-2026-25754

GHSA-qcm7-3vpr-hj5h · CVE-2026-48795

high2026-02-06

AdonisJS vulnerable to Denial of Service (DoS) via Unrestricted Memory Buffering in PartHandler during File Type Detection

GHSA-xx9g-fh25-4q64 · CVE-2026-25762

high2026-02-06

AdonisJS multipart body parsing has Prototype Pollution issue

GHSA-f5x2-vj4h-vg4c · CVE-2026-25754

critical2026-01-02

AdonisJS Path Traversal in Multipart File Handling

GHSA-gvq6-hvvp-h34h · CVE-2026-21440