Pillarjs
7 CVEs across 4 Pillarjs products. Browse Pillarjs vulnerabilities, severities, and proof-of-concept exploits.
Pillarjs products with known CVEs
Pillarjs CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2026-8162 | High | 7.5 | 2026-05-12 | multiparty@4.2.3 and lower versions are vulnerable to denial of service via uncaught exception. By sending a multipart/form-data request with a Content-Disposi… |
CVE-2026-8161 | High | 7.5 | 2026-05-12 | multiparty@4.2.3 and lower versions are vulnerable to denial of service via uncaught exception. By sending a multipart/form-data request with a field name that… |
CVE-2026-8159 | High | 7.5 | 2026-05-12 | multiparty@4.2.3 and lower versions are vulnerable to denial of service via regular expression backtracking in the Content-Disposition filename parameter parse… |
CVE-2026-4926 | High | 7.5 | 2026-03-26 | Impact:
A bad regular expression is generated any time you have multiple sequential optional groups (curly brace syntax), such as `{a}{b}{c}:z`. The generated… |
CVE-2026-4923 | Medium | 5.9 | 2026-03-26 | Impact:
When using multiple wildcards, combined with at least one parameter, a regular expression can be generated that is vulnerable to ReDoS. This backtrack… |
CVE-2026-4867 | High | 7.5 | 2026-03-26 | Impact:
A bad regular expression is generated any time you have three or more parameters within a single segment, separated by something that is not a period… |
CVE-2024-52798 | | | 2024-12-05 | path-to-regexp turns path strings into a regular expressions. In certain cases, path-to-regexp will output a regular expression that can be exploited to cause… |
CVE-2024-43799 | Medium | 5.0 | 2024-09-10 | Send is a library for streaming files from the file system as a http response. Send passes untrusted user input to SendStream.redirect() which executes untrust… |
CVE-2024-45296 | High | 7.5 | 2024-09-09 | path-to-regexp turns path strings into a regular expressions. In certain cases, path-to-regexp will output a regular expression that can be exploited to cause… |
CVE-2021-32822 | Medium | 4.0 | 2021-08-16 | The npm hbs package is an Express view engine wrapper for Handlebars. Depending on usage, users of hbs may be vulnerable to a file disclosure vulnerability. Th… |