StackRadar

CVE-2026-113872

High

Advisory

Published 23 Oct 2026In the index since 24 Oct 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.004
37th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
72
of 18,232 indexed, latest versions
Container images
69
deployed by those charts
Fix available
1 of 1
affected package

multer vulnerable to Denial of Service via a pending asynchronous fileFilter after request teardown

Carried by container images the latest versions of 72 of 18,232 indexed charts deploy, on 69 images.

Affected packageAffected versionsFixed inImages
multernpm2.0.1, 2.0.2, 2.1.1, 2.2.0+2 more2.5.069
OSV records
GHSA-q7qp-rjg7-q26m

Charts affected

72 by stars
ChartLatestAffected imagesRadar Score
ghostkubernetes-homelab-helm-chartsVerified publisher0.3.01 of 2See more

ghost kubernetes-homelab-helm-charts 0.3.0

1 of the 2 container images this version deploys carry CVE-2026-113872.

Container imageDigestPackageFixed in
library/ghost:6.71.0-alpine8e07c5ec63d9
multer@2.4.0
2.5.0

Open the chart page →

2,157
seerrkubernetes-homelab-helm-chartsVerified publisher0.3.01 of 1See more

seerr kubernetes-homelab-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-113872.

Container imageDigestPackageFixed in
ghcr.io/seerr-team/seerr:v3.5.027602401178d
multer@2.1.1
2.5.0

Open the chart page →

2,472
node-redlmatfyVerified publisher0.1.61 of 1See more

node-red lmatfy 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-113872.

Container imageDigestPackageFixed in
nodered/node-red:4.1.10-minimald73ae167cb9b
multer@2.1.1
2.5.0

Open the chart page →

2,316
redisinsightlogic3579Verified publisher3.4.01 of 1See more

redisinsight logic3579 3.4.0

1 of the 1 container images this version deploys carry CVE-2026-113872.

Container imageDigestPackageFixed in
redis/redisinsight:3.485562d67a912
multer@2.0.2
2.5.0

Open the chart page →

1,849
ghostmt1905028.25.11 of 3See more

ghost mt190502 8.25.1

1 of the 3 container images this version deploys carry CVE-2026-113872.

Container imageDigestPackageFixed in
library/ghost:6.25.12654b1e90413
multer@2.1.1
2.5.0

Open the chart page →

6,630
n8nn8n-openshiftVerified publisher1.18.01 of 1See more

n8n n8n-openshift 1.18.0

1 of the 1 container images this version deploys carry CVE-2026-113872.

Container imageDigestPackageFixed in
n8nio/n8n:2.36.714c4285bc303
multer@2.2.0
2.5.0

Open the chart page →

2,762
firecrawlobeoneVerified publisher3.0.211 of 5See more

firecrawl obeone 3.0.21

1 of the 5 container images this version deploys carry CVE-2026-113872.

Container imageDigestPackageFixed in
ghcr.io/firecrawl/firecrawl:2.11.693-staginge2f493babbc5
multer@2.4.0
2.5.0

Open the chart page →

12,005
n8nopenshift1.18.01 of 1See more

n8n openshift 1.18.0

1 of the 1 container images this version deploys carry CVE-2026-113872.

Container imageDigestPackageFixed in
n8nio/n8n:2.36.714c4285bc303
multer@2.2.0
2.5.0

Open the chart page →

2,762
portalplatform-mesh-portal0.21.111 of 1See more

portal platform-mesh-portal 0.21.11

1 of the 1 container images this version deploys carry CVE-2026-113872.

Container imageDigestPackageFixed in
ghcr.io/platform-mesh/portal:v0.27.127f9fd5bf5cdd
multer@2.4.0
2.5.0

Open the chart page →

203
prismeai-coreprismeai1.12.34 of 7See more

prismeai-core prismeai 1.12.3

4 of the 7 container images this version deploys carry CVE-2026-113872.

Container imageDigestPackageFixed in
registry.gitlab.com/prisme.ai/prisme.ai/prisme.ai-api-gateway:prod90779690fa2d
multer@2.3.0
2.5.0
registry.gitlab.com/prisme.ai/prisme.ai/prisme.ai-events:prod9453efa2367c
multer@2.3.0
2.5.0
registry.gitlab.com/prisme.ai/prisme.ai/prisme.ai-runtime:prod47f685b79ca5
multer@2.3.0
2.5.0
registry.gitlab.com/prisme.ai/prisme.ai/prisme.ai-workspaces:prodaf61bebe8939
multer@2.3.0
2.5.0

Open the chart page →

6,137
redisinsightredisinsightVerified publisher0.1.01 of 1See more

redisinsight redisinsight 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-113872.

Container imageDigestPackageFixed in
redis/redisinsight:latestb5e19ee240ab
multer@2.0.2
2.5.0

Open the chart page →

1,434
seerr-chartseerr-chartVerified publisher3.10.11 of 1See more

seerr-chart seerr-chart 3.10.1

1 of the 1 container images this version deploys carry CVE-2026-113872.

Container imageDigestPackageFixed in
ghcr.io/seerr-team/seerr:v3.5.1d8fab675b55a
multer@2.1.1
2.5.0

Open the chart page →

2,314
retail-store-sample-checkout-chartstacksimplifyVerified publisher1.0.01 of 1See more

retail-store-sample-checkout-chart stacksimplify 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-113872.

Container imageDigestPackageFixed in
public.ecr.aws/aws-containers/retail-store-sample-checkout:1.3.0687aa68dd490
multer@2.0.1
2.5.0

Open the chart page →

1,590
thanhvt27-lab-k8sthanh-vtVerified publisher0.1.41 of 5See more

thanhvt27-lab-k8s thanh-vt 0.1.4

1 of the 5 container images this version deploys carry CVE-2026-113872.

Container imageDigestPackageFixed in
redis/redisinsight:latestb5e19ee240ab
multer@2.0.2
2.5.0

Open the chart page →

6,202
twentytwenty-crm0.1.111 of 4See more

twenty twenty-crm 0.1.11

1 of the 4 container images this version deploys carry CVE-2026-113872.

Container imageDigestPackageFixed in
twentycrm/twenty:v2.22.0e7d9948bf284
multer@2.2.0
2.5.0

Open the chart page →

7,005
evershopunifieVerified publisher1.0.01 of 1See more

evershop unifie 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-113872.

Container imageDigestPackageFixed in
evershop/evershop:latest2acdcd7ed59f
multer@2.4.0
2.5.0

Open the chart page →

925
excalidashunxwaresVerified publisher2026.10.11 of 2See more

excalidash unxwares 2026.10.1

1 of the 2 container images this version deploys carry CVE-2026-113872.

Container imageDigestPackageFixed in
zimengxiong/excalidash-backend:0.6.529937c62fbed
multer@2.4.0
2.5.0

Open the chart page →

692
evolution-apivcnngrVerified publisher1.0.01 of 5See more

evolution-api vcnngr 1.0.0

1 of the 5 container images this version deploys carry CVE-2026-113872.

Container imageDigestPackageFixed in
evoapicloud/evolution-api:latest966625532d90
multer@2.0.2
2.5.0

Open the chart page →

5,216
devportalveecode-platform-nextVerified publisher1.1.21 of 1See more

devportal veecode-platform-next 1.1.2

1 of the 1 container images this version deploys carry CVE-2026-113872.

Container imageDigestPackageFixed in
veecode/devportaldigest-pinned726cc70543dd
multer@2.4.0
2.5.0

Open the chart page →

1,769
n8nvictorlane1.0.181 of 1See more

n8n victorlane 1.0.18

1 of the 1 container images this version deploys carry CVE-2026-113872.

Container imageDigestPackageFixed in
n8nio/n8n:1.115.1ed16e560c40e
multer@2.0.2
2.5.0

Open the chart page →

8,145
twenty-crmvictorlane0.0.11 of 3See more

twenty-crm victorlane 0.0.1

1 of the 3 container images this version deploys carry CVE-2026-113872.

Container imageDigestPackageFixed in
twentycrm/twenty:latest91793759486e
multer@2.4.0
2.5.0

Open the chart page →

72,567
sirenwateim1.0.21 of 1See more

siren wateim 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-113872.

Container imageDigestPackageFixed in
sigp/siren:v3.0.42c219b04758e
multer@2.0.1
2.5.0

Open the chart page →

6,674

Container images carrying it

69 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/backstage/backstage:latest68f2025a3f27
multer@2.4.0
2.5.0
1
ghcr.io/bryopsida/patchwork:mainc01e018bced4
multer@2.0.1
2.5.0
1
ghcr.io/firecrawl/firecrawl:2.11.693-staginge2f493babbc5
multer@2.4.0
2.5.0
1
ghcr.io/immich-app/immich-server:v3.3.5485d546a2e31
multer@2.4.0
2.5.0
1
ghcr.io/immich-app/immich-server:v3.3.4f6475c58b07a
multer@2.4.0
2.5.0
1
ghcr.io/nmshd/connector:7.5.7c18dcfb81d12
multer@2.4.0
2.5.0
1
ghcr.io/platform-mesh/portal:v0.27.127f9fd5bf5cdd
multer@2.4.0
2.5.0
1
ghcr.io/seerr-team/seerr:v3.5.1d8fab675b55a
multer@2.1.1
2.5.0
1
ghcr.io/sredevopsorg/ghost-on-kubernetes:main305999dea18a
multer@2.4.0
2.5.0
1
ghcr.io/toeverything/affine:0.27.4b649f5ce2384
multer@2.2.0
2.5.0
1
public.ecr.aws/aws-containers/retail-store-sample-checkout:1.3.0687aa68dd490
multer@2.0.1
2.5.0
1
quay.io/rhdh/rhdh-hub-rhel9:lateste992092fcc9b
multer@2.4.0
2.5.0
1
quay.io/seamware/onboarding:0.2.2b406475f9f00
multer@2.0.2
2.5.0
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-backend:1.0.31c7afac3446d6
multer@2.1.1
2.5.0
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-user:1.0.31d8a9cd4e1ae3
multer@2.1.1
2.5.0
1
registry.gitlab.com/prisme.ai/prisme.ai/prisme.ai-api-gateway:prod90779690fa2d
multer@2.3.0
2.5.0
1
registry.gitlab.com/prisme.ai/prisme.ai/prisme.ai-events:prod9453efa2367c
multer@2.3.0
2.5.0
1
registry.gitlab.com/prisme.ai/prisme.ai/prisme.ai-runtime:prod47f685b79ca5
multer@2.3.0
2.5.0
1
registry.gitlab.com/prisme.ai/prisme.ai/prisme.ai-workspaces:prodaf61bebe8939
multer@2.3.0
2.5.0
1

syft 1.42.1 · advisories as of 24 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.