StackRadar

CVE-2026-113872

High

Advisory

Published 23 Oct 2026In the index since 24 Oct 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.004
37th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
72
of 18,232 indexed, latest versions
Container images
69
deployed by those charts
Fix available
1 of 1
affected package

multer vulnerable to Denial of Service via a pending asynchronous fileFilter after request teardown

Carried by container images the latest versions of 72 of 18,232 indexed charts deploy, on 69 images.

Affected packageAffected versionsFixed inImages
multernpm2.0.1, 2.0.2, 2.1.1, 2.2.0+2 more2.5.069
OSV records
GHSA-q7qp-rjg7-q26m

Charts affected

72 by stars
ChartLatestAffected imagesRadar Score
n8ncommunity-chartsVerified publisher1.24.431 of 1See more

n8n community-charts 1.24.43

1 of the 1 container images this version deploys carry CVE-2026-113872.

Container imageDigestPackageFixed in
n8nio/n8n:2.41.687e0bab2c931
multer@2.3.0
2.5.0

Open the chart page →

1,888
n8nopen-8gears2.1.11 of 1See more

n8n open-8gears 2.1.1

1 of the 1 container images this version deploys carry CVE-2026-113872.

Container imageDigestPackageFixed in
n8nio/n8n:2.36.8cfe2704ff858
multer@2.2.0
2.5.0

Open the chart page →

2,762
backstagebackstageOfficialVerified publisher2.10.21 of 1See more

backstage backstage 2.10.2

1 of the 1 container images this version deploys carry CVE-2026-113872.

Container imageDigestPackageFixed in
ghcr.io/backstage/backstage:latest68f2025a3f27
multer@2.4.0
2.5.0

Open the chart page →

1,490
node-rednode-redVerified publisher0.40.21 of 1See more

node-red node-red 0.40.2

1 of the 1 container images this version deploys carry CVE-2026-113872.

Container imageDigestPackageFixed in
nodered/node-red:4.1.2216e7403aab9
multer@2.0.2
2.5.0

Open the chart page →

2,910
oneuptimeoneuptimeOfficialVerified publisher14.0.873 of 7See more

oneuptime oneuptime 14.0.87

3 of the 7 container images this version deploys carry CVE-2026-113872.

Container imageDigestPackageFixed in
oneuptime/nginx:release64cc9c60a76a
multer@2.4.0
2.5.0
oneuptime/probe:releasedd75b4631455
multer@2.4.0
2.5.0
oneuptime/runner:releasea99da95a0490
multer@2.4.0
2.5.0

Open the chart page →

9,838
servarrkubitodevVerified publisher1.5.21 of 10See more

servarr kubitodev 1.5.2

1 of the 10 container images this version deploys carry CVE-2026-113872.

Container imageDigestPackageFixed in
ghcr.io/seerr-team/seerr:latest27602401178d
multer@2.1.1
2.5.0

Open the chart page →

3,746
n8nhelmforgeVerified publisher2.1.81 of 2See more

n8n helmforge 2.1.8

1 of the 2 container images this version deploys carry CVE-2026-113872.

Container imageDigestPackageFixed in
n8nio/n8n:2.44.4c72fa9f1bd9b
multer@2.3.0
2.5.0

Open the chart page →

1,358
redisinsightredisinsight-guiVerified publisher1.3.51 of 1See more

redisinsight redisinsight-gui 1.3.5

1 of the 1 container images this version deploys carry CVE-2026-113872.

Container imageDigestPackageFixed in
redis/redisinsight:3.8b5e19ee240ab
multer@2.0.2
2.5.0

Open the chart page →

1,434
backstagerhdh-chartVerified publisher4.0.11 of 2See more

backstage rhdh-chart 4.0.1

1 of the 2 container images this version deploys carry CVE-2026-113872.

Container imageDigestPackageFixed in
quay.io/rhdh/rhdh-hub-rhel9:lateste992092fcc9b
multer@2.4.0
2.5.0

Open the chart page →

2,297
dialdialOfficialVerified publisher8.1.01 of 4See more

dial dial 8.1.0

1 of the 4 container images this version deploys carry CVE-2026-113872.

Container imageDigestPackageFixed in
epam/ai-dial-chat:1.2.4df205138325d
multer@2.4.0
2.5.0

Open the chart page →

1,897
heimdallheimdallOfficialVerified publisher3.3.31 of 2See more

heimdall heimdall 3.3.3

1 of the 2 container images this version deploys carry CVE-2026-113872.

Container imageDigestPackageFixed in
mitre/heimdall2:release-latest06f6e72d416a
multer@2.2.0
2.5.0

Open the chart page →

2,922
ghostcloudpirates-ghostVerified publisher0.20.321 of 3See more

ghost cloudpirates-ghost 0.20.32

1 of the 3 container images this version deploys carry CVE-2026-113872.

Container imageDigestPackageFixed in
library/ghost:6.72.0c0d83a8d4522
multer@2.4.0
2.5.0

Open the chart page →

9,293
ghost-on-kubernetesghost-on-kubernetes-helmVerified publisher2.0.21 of 3See more

ghost-on-kubernetes ghost-on-kubernetes-helm 2.0.2

1 of the 3 container images this version deploys carry CVE-2026-113872.

Container imageDigestPackageFixed in
ghcr.io/sredevopsorg/ghost-on-kubernetes:main305999dea18a
multer@2.4.0
2.5.0

Open the chart page →

1,792
nocodbzekker6Verified publisher1.10.01 of 1See more

nocodb zekker6 1.10.0

1 of the 1 container images this version deploys carry CVE-2026-113872.

Container imageDigestPackageFixed in
nocodb/nocodb:0.301.5d9516f0bf546
multer@2.0.2
2.5.0

Open the chart page →

5,816
seerrbdclark-helm-chartsVerified publisher0.1.61 of 1See more

seerr bdclark-helm-charts 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-113872.

Container imageDigestPackageFixed in
ghcr.io/seerr-team/seerr:v3.5.027602401178d
multer@2.1.1
2.5.0

Open the chart page →

2,472
node-redcharts-derwitt-devVerified publisher2.1.41 of 1See more

node-red charts-derwitt-dev 2.1.4

1 of the 1 container images this version deploys carry CVE-2026-113872.

Container imageDigestPackageFixed in
nodered/node-red:5.0.9e085d4a06591
multer@2.4.0
2.5.0

Open the chart page →

200
enbuildenbuildVerified publisher0.0.502 of 6See more

enbuild enbuild 0.0.50

2 of the 6 container images this version deploys carry CVE-2026-113872.

Container imageDigestPackageFixed in
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-backend:1.0.31c7afac3446d6
multer@2.1.1
2.5.0
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-user:1.0.31d8a9cd4e1ae3
multer@2.1.1
2.5.0

Open the chart page →

78,014
ghostfolioghostfolioVerified publisher0.5.41 of 3See more

ghostfolio ghostfolio 0.5.4

1 of the 3 container images this version deploys carry CVE-2026-113872.

Container imageDigestPackageFixed in
ghostfolio/ghostfolio:3.7.0e3c6ab53e49b
multer@2.1.1
2.5.0

Open the chart page →

3,863
ghostgroundhog2k0.212.181 of 1See more

ghost groundhog2k 0.212.18

1 of the 1 container images this version deploys carry CVE-2026-113872.

Container imageDigestPackageFixed in
library/ghost:6.71.000032f157262
multer@2.4.0
2.5.0

Open the chart page →

2,159
immichimmich-helmVerified publisher0.5.11 of 4See more

immich immich-helm 0.5.1

1 of the 4 container images this version deploys carry CVE-2026-113872.

Container imageDigestPackageFixed in
ghcr.io/immich-app/immich-server:v3.3.4f6475c58b07a
multer@2.4.0
2.5.0

Open the chart page →

10,531
n8nklicktippVerified publisher1.12.01 of 1See more

n8n klicktipp 1.12.0

1 of the 1 container images this version deploys carry CVE-2026-113872.

Container imageDigestPackageFixed in
n8nio/n8n:2.45.3bf88c3783fc4
multer@2.3.0
2.5.0

Open the chart page →

577
n8nn8n-helm2.25.71 of 1See more

n8n n8n-helm 2.25.7

1 of the 1 container images this version deploys carry CVE-2026-113872.

Container imageDigestPackageFixed in
n8nio/n8n:2.25.7761374d4eb84
multer@2.1.1
2.5.0

Open the chart page →

4,424
patchworkpatchworkVerified publisher0.8.61 of 2See more

patchwork patchwork 0.8.6

1 of the 2 container images this version deploys carry CVE-2026-113872.

Container imageDigestPackageFixed in
ghcr.io/bryopsida/patchwork:mainc01e018bced4
multer@2.0.1
2.5.0

Open the chart page →

2,284
peertubepeertubeVerified publisher0.1.31 of 1See more

peertube peertube 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-113872.

Container imageDigestPackageFixed in
chocobozzz/peertube:v8.1.5052712130691
multer@2.1.1
2.5.0

Open the chart page →

9,059
rocketadminrocketadminOfficialVerified publisher1.0.431 of 1See more

rocketadmin rocketadmin 1.0.43

1 of the 1 container images this version deploys carry CVE-2026-113872.

Container imageDigestPackageFixed in
rocketadmin/rocketadmin:1.23.70bd1abb0bfd1
multer@2.1.1
2.5.0

Open the chart page →

27,427
immichsecustorVerified publisher2.0.121 of 1See more

immich secustor 2.0.12

1 of the 1 container images this version deploys carry CVE-2026-113872.

Container imageDigestPackageFixed in
ghcr.io/immich-app/immich-server:v3.3.5485d546a2e31
multer@2.4.0
2.5.0

Open the chart page →

3,170
vaultwarden-kubernetes-secretsvaultwarden-kubernetes-secrets0.0.0-main1 of 2See more

vaultwarden-kubernetes-secrets vaultwarden-kubernetes-secrets 0.0.0-main

1 of the 2 container images this version deploys carry CVE-2026-113872.

Container imageDigestPackageFixed in
ghcr.io/antoniolago/vaultwarden-kubernetes-secrets:0.0.0-main13e267ad7d94
multer@2.0.2
2.5.0

Open the chart page →

4,877
excalidashalekcVerified publisher2.0.11 of 2See more

excalidash alekc 2.0.1

1 of the 2 container images this version deploys carry CVE-2026-113872.

Container imageDigestPackageFixed in
zimengxiong/excalidash-backend:0.6.60ac551ef3dab
multer@2.4.0
2.5.0

Open the chart page →

83
immichbear0.1.11 of 2See more

immich bear 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-113872.

Container imageDigestPackageFixed in
ghcr.io/immich-app/immich-server:v3.1.0b434cb9287ee
multer@2.2.0
2.5.0

Open the chart page →

8,756
ghostchart-ghost0.1.71 of 2See more

ghost chart-ghost 0.1.7

1 of the 2 container images this version deploys carry CVE-2026-113872.

Container imageDigestPackageFixed in
library/ghost:6.69.0-alpine3.23db4c56c196d6
multer@2.4.0
2.5.0

Open the chart page →

1,377
codiac-cluster-agent-chartcodiac-cluster-agent1.0.381 of 1See more

codiac-cluster-agent-chart codiac-cluster-agent 1.0.38

1 of the 1 container images this version deploys carry CVE-2026-113872.

Container imageDigestPackageFixed in
codiacimages/codiac-cluster-agent:1.0.380cd44ca7a7ee
multer@2.0.2
2.5.0

Open the chart page →

1,856
dapr-agentsdapr-agents-devVerified publisher0.1.51 of 31See more

dapr-agents dapr-agents-dev 0.1.5

1 of the 31 container images this version deploys carry CVE-2026-113872.

Container imageDigestPackageFixed in
redis/redisinsight:latestb5e19ee240ab
multer@2.0.2
2.5.0

Open the chart page →

33,648
node-reddjdl-charts0.33.01 of 1See more

node-red djdl-charts 0.33.0

1 of the 1 container images this version deploys carry CVE-2026-113872.

Container imageDigestPackageFixed in
nodered/node-red:latestb5adb6c9dd29
multer@2.4.0
2.5.0

Open the chart page →

342
node-redegebackVerified publisher2.0.131 of 1See more

node-red egeback 2.0.13

1 of the 1 container images this version deploys carry CVE-2026-113872.

Container imageDigestPackageFixed in
nodered/node-red:5.0.410f40d0a83e7
multer@2.2.0
2.5.0

Open the chart page →

1,658
connector-helm-chartenmeshed-connectorOfficialVerified publisher7.5.71 of 1See more

connector-helm-chart enmeshed-connector 7.5.7

1 of the 1 container images this version deploys carry CVE-2026-113872.

Container imageDigestPackageFixed in
ghcr.io/nmshd/connector:7.5.7c18dcfb81d12
multer@2.4.0
2.5.0

Open the chart page →

378
business-api-ecosystemfiware1.2.01 of 4See more

business-api-ecosystem fiware 1.2.0

1 of the 4 container images this version deploys carry CVE-2026-113872.

Container imageDigestPackageFixed in
fiware/biz-ecosystem-logic-proxy:11.20.3d551a13e8278
multer@2.0.1
2.5.0

Open the chart page →

173,007
onboarding-portalfiware1.5.01 of 1See more

onboarding-portal fiware 1.5.0

1 of the 1 container images this version deploys carry CVE-2026-113872.

Container imageDigestPackageFixed in
quay.io/seamware/onboarding:0.2.2b406475f9f00
multer@2.0.2
2.5.0

Open the chart page →

1,909
affinehelmforgeVerified publisher1.0.51 of 3See more

affine helmforge 1.0.5

1 of the 3 container images this version deploys carry CVE-2026-113872.

Container imageDigestPackageFixed in
ghcr.io/toeverything/affine:0.27.4b649f5ce2384
multer@2.2.0
2.5.0

Open the chart page →

4,913
ghosthelmforgeVerified publisher1.2.131 of 3See more

ghost helmforge 1.2.13

1 of the 3 container images this version deploys carry CVE-2026-113872.

Container imageDigestPackageFixed in
library/ghost:6.71.000032f157262
multer@2.4.0
2.5.0

Open the chart page →

3,067
ghostfoliohelmforgeVerified publisher1.1.21 of 4See more

ghostfolio helmforge 1.1.2

1 of the 4 container images this version deploys carry CVE-2026-113872.

Container imageDigestPackageFixed in
ghostfolio/ghostfolio:3.88.0256c524a6116
multer@2.4.0
2.5.0

Open the chart page →

5,372
hoppscotchhelmforgeVerified publisher1.1.151 of 2See more

hoppscotch helmforge 1.1.15

1 of the 2 container images this version deploys carry CVE-2026-113872.

Container imageDigestPackageFixed in
hoppscotch/hoppscotch:2026.9.03160f5b3acf4
multer@2.3.0
2.5.0

Open the chart page →

2,586
immichhelmforgeVerified publisher1.2.131 of 5See more

immich helmforge 1.2.13

1 of the 5 container images this version deploys carry CVE-2026-113872.

Container imageDigestPackageFixed in
ghcr.io/immich-app/immich-server:v3.1.0b434cb9287ee
multer@2.2.0
2.5.0

Open the chart page →

13,985
matterbridgehelmforgeVerified publisher1.0.111 of 1See more

matterbridge helmforge 1.0.11

1 of the 1 container images this version deploys carry CVE-2026-113872.

Container imageDigestPackageFixed in
luligu/matterbridge:3.10.1447f86fe9ae00
multer@2.4.0
2.5.0

Open the chart page →

812
twentyhelmforgeVerified publisher1.0.91 of 5See more

twenty helmforge 1.0.9

1 of the 5 container images this version deploys carry CVE-2026-113872.

Container imageDigestPackageFixed in
twentycrm/twenty:v2.49.080e1b33b0b4b
multer@2.4.0
2.5.0

Open the chart page →

3,146
nocodbinseefrlab0.2.01 of 1See more

nocodb inseefrlab 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-113872.

Container imageDigestPackageFixed in
nocodb/nocodb:lateste8fee91b205b
multer@2.4.0
2.5.0

Open the chart page →

257
ghostjanip81-helm-chartsVerified publisher0.1.21 of 1See more

ghost janip81-helm-charts 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-113872.

Container imageDigestPackageFixed in
library/ghost:6.37.01ef2e532ca4d
multer@2.1.1
2.5.0

Open the chart page →

4,947
ghostk8s-home-lab-repo4.1.01 of 1See more

ghost k8s-home-lab-repo 4.1.0

1 of the 1 container images this version deploys carry CVE-2026-113872.

Container imageDigestPackageFixed in
library/ghost:6.41.129773d6be407
multer@2.1.1
2.5.0

Open the chart page →

4,468
node-redk8sonlabVerified publisher1.2.11 of 1See more

node-red k8sonlab 1.2.1

1 of the 1 container images this version deploys carry CVE-2026-113872.

Container imageDigestPackageFixed in
nodered/node-red:5.0.9e085d4a06591
multer@2.4.0
2.5.0

Open the chart page →

200
zwave-js-uik8sonlabVerified publisher0.8.11 of 1See more

zwave-js-ui k8sonlab 0.8.1

1 of the 1 container images this version deploys carry CVE-2026-113872.

Container imageDigestPackageFixed in
zwavejs/zwave-js-ui:11.25.152462f5cb50b
multer@2.4.0
2.5.0

Open the chart page →

631
redisinsightklicktippVerified publisher0.5.01 of 1See more

redisinsight klicktipp 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-113872.

Container imageDigestPackageFixed in
redis/redisinsight:3.2.055542a762210
multer@2.0.2
2.5.0

Open the chart page →

1,784

Container images carrying it

69 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/backstage/backstage:latest68f2025a3f27
multer@2.4.0
2.5.0
1
ghcr.io/bryopsida/patchwork:mainc01e018bced4
multer@2.0.1
2.5.0
1
ghcr.io/firecrawl/firecrawl:2.11.693-staginge2f493babbc5
multer@2.4.0
2.5.0
1
ghcr.io/immich-app/immich-server:v3.3.5485d546a2e31
multer@2.4.0
2.5.0
1
ghcr.io/immich-app/immich-server:v3.3.4f6475c58b07a
multer@2.4.0
2.5.0
1
ghcr.io/nmshd/connector:7.5.7c18dcfb81d12
multer@2.4.0
2.5.0
1
ghcr.io/platform-mesh/portal:v0.27.127f9fd5bf5cdd
multer@2.4.0
2.5.0
1
ghcr.io/seerr-team/seerr:v3.5.1d8fab675b55a
multer@2.1.1
2.5.0
1
ghcr.io/sredevopsorg/ghost-on-kubernetes:main305999dea18a
multer@2.4.0
2.5.0
1
ghcr.io/toeverything/affine:0.27.4b649f5ce2384
multer@2.2.0
2.5.0
1
public.ecr.aws/aws-containers/retail-store-sample-checkout:1.3.0687aa68dd490
multer@2.0.1
2.5.0
1
quay.io/rhdh/rhdh-hub-rhel9:lateste992092fcc9b
multer@2.4.0
2.5.0
1
quay.io/seamware/onboarding:0.2.2b406475f9f00
multer@2.0.2
2.5.0
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-backend:1.0.31c7afac3446d6
multer@2.1.1
2.5.0
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-user:1.0.31d8a9cd4e1ae3
multer@2.1.1
2.5.0
1
registry.gitlab.com/prisme.ai/prisme.ai/prisme.ai-api-gateway:prod90779690fa2d
multer@2.3.0
2.5.0
1
registry.gitlab.com/prisme.ai/prisme.ai/prisme.ai-events:prod9453efa2367c
multer@2.3.0
2.5.0
1
registry.gitlab.com/prisme.ai/prisme.ai/prisme.ai-runtime:prod47f685b79ca5
multer@2.3.0
2.5.0
1
registry.gitlab.com/prisme.ai/prisme.ai/prisme.ai-workspaces:prodaf61bebe8939
multer@2.3.0
2.5.0
1

syft 1.42.1 · advisories as of 24 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.