@fastify/multipart

10.1.6 · 22 Oct 2026MIT1.9M / weekRepository Homepage npm Atom feed

Security advisories

From OSV, open ones first. Each release line gets its own fix: an older major is fixed by a patch on that major, not by moving to the newest one.

Paste your package.json, or type the range you declare for @fastify/multipart. It is read in your browser and sent nowhere.

Line	Newest	Where it stands
	10.1.6	No known advisory
	9.4.0	Safe from 9.0.3
	8.3.1	2 open advisories, worst high · last release Jan 2025, no longer updated

Your version

High
Unlimited consumption of resources in @fastify/multipartGHSA-27c6-mcxv-x3fh · 23 Jan 2025
- 9.x9.0.0 – 9.0.2Fixed in 9.0.3
- 8.x8.0.0 – 8.3.0Fixed in 8.3.1
- 7.x and older6.0.0 – 7.7.3No fix, no longer updated · move to 8.3.1
High
Denial of service due to unlimited number of partsGHSA-hpp2-2cr5-pf6g · 14 Feb 2023
- 7.x7.0.0 – 7.4.0Fixed in 7.4.1
- 6.x6.0.0Fixed in 6.0.1

What npm and deps.dev say about the latest release. Signals, not a verdict.

Reading npm and deps.dev…

Registry facts last checked 22 Oct 2026. Releases and advisories last read 22 Oct 2026.