fastify/busboy Security Advisories | GitStock

medium2026-10-05

@fastify/busboy vulnerable to CRLF injection via multipart Content-Disposition filename and name

GHSA-gxm5-99cw-xjw9 · CVE-2026-74866

high2026-10-02

@fastify/busboy vulnerable to Denial of Service via prototype-named multipart part header

GHSA-x8mw-p69m-v3mx · CVE-2026-19481

high2026-10-02

@fastify/busboy vulnerable to Denial of Service via oversized multipart boundary

GHSA-xjh9-v7x6-24jw · CVE-2026-19484