bjohansebas

multer vulnerable to Denial of Service via file descriptor leak on aborted uploads

multer vulnerable to file size limit bypass via async fileFilter race condition

hbs vulnerable to XSS via registerAsyncHelper output-escaping bypass

morgan vulnerable to Log Forging via unescaped Unicode line separators

body-parser vulnerable to denial of service when invalid limit value silently disables size enforcement

webpack-dev-server vulnerable to cross-site request forgery via internal developer endpoints

webpack-dev-server vulnerable to denial of service via a malformed Host or Origin header

webpack-dev-server vulnerable to HMR WebSocket interception via permissive user proxies

multer vulnerable to Denial of Service via incomplete cleanup of aborted uploads