StackRadar

CVE-2026-113872

High

Advisory

Published 23 Oct 2026In the index since 24 Oct 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.004
37th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
72
of 18,232 indexed, latest versions
Container images
69
deployed by those charts
Fix available
1 of 1
affected package

multer vulnerable to Denial of Service via a pending asynchronous fileFilter after request teardown

Carried by container images the latest versions of 72 of 18,232 indexed charts deploy, on 69 images.

Affected packageAffected versionsFixed inImages
multernpm2.0.1, 2.0.2, 2.1.1, 2.2.0+2 more2.5.069
OSV records
GHSA-q7qp-rjg7-q26m

Charts affected

72 by stars
ChartLatestAffected imagesRadar Score
ghostkubernetes-homelab-helm-chartsVerified publisher0.3.01 of 2See more

ghost kubernetes-homelab-helm-charts 0.3.0

1 of the 2 container images this version deploys carry CVE-2026-113872.

Container imageDigestPackageFixed in
library/ghost:6.71.0-alpine8e07c5ec63d9
multer@2.4.0
2.5.0

Open the chart page →

2,157
seerrkubernetes-homelab-helm-chartsVerified publisher0.3.01 of 1See more

seerr kubernetes-homelab-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-113872.

Container imageDigestPackageFixed in
ghcr.io/seerr-team/seerr:v3.5.027602401178d
multer@2.1.1
2.5.0

Open the chart page →

2,472
node-redlmatfyVerified publisher0.1.61 of 1See more

node-red lmatfy 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-113872.

Container imageDigestPackageFixed in
nodered/node-red:4.1.10-minimald73ae167cb9b
multer@2.1.1
2.5.0

Open the chart page →

2,316
redisinsightlogic3579Verified publisher3.4.01 of 1See more

redisinsight logic3579 3.4.0

1 of the 1 container images this version deploys carry CVE-2026-113872.

Container imageDigestPackageFixed in
redis/redisinsight:3.485562d67a912
multer@2.0.2
2.5.0

Open the chart page →

1,849
ghostmt1905028.25.11 of 3See more

ghost mt190502 8.25.1

1 of the 3 container images this version deploys carry CVE-2026-113872.

Container imageDigestPackageFixed in
library/ghost:6.25.12654b1e90413
multer@2.1.1
2.5.0

Open the chart page →

6,630
n8nn8n-openshiftVerified publisher1.18.01 of 1See more

n8n n8n-openshift 1.18.0

1 of the 1 container images this version deploys carry CVE-2026-113872.

Container imageDigestPackageFixed in
n8nio/n8n:2.36.714c4285bc303
multer@2.2.0
2.5.0

Open the chart page →

2,762
firecrawlobeoneVerified publisher3.0.211 of 5See more

firecrawl obeone 3.0.21

1 of the 5 container images this version deploys carry CVE-2026-113872.

Container imageDigestPackageFixed in
ghcr.io/firecrawl/firecrawl:2.11.693-staginge2f493babbc5
multer@2.4.0
2.5.0

Open the chart page →

12,005
n8nopenshift1.18.01 of 1See more

n8n openshift 1.18.0

1 of the 1 container images this version deploys carry CVE-2026-113872.

Container imageDigestPackageFixed in
n8nio/n8n:2.36.714c4285bc303
multer@2.2.0
2.5.0

Open the chart page →

2,762
portalplatform-mesh-portal0.21.111 of 1See more

portal platform-mesh-portal 0.21.11

1 of the 1 container images this version deploys carry CVE-2026-113872.

Container imageDigestPackageFixed in
ghcr.io/platform-mesh/portal:v0.27.127f9fd5bf5cdd
multer@2.4.0
2.5.0

Open the chart page →

203
prismeai-coreprismeai1.12.34 of 7See more

prismeai-core prismeai 1.12.3

4 of the 7 container images this version deploys carry CVE-2026-113872.

Container imageDigestPackageFixed in
registry.gitlab.com/prisme.ai/prisme.ai/prisme.ai-api-gateway:prod90779690fa2d
multer@2.3.0
2.5.0
registry.gitlab.com/prisme.ai/prisme.ai/prisme.ai-events:prod9453efa2367c
multer@2.3.0
2.5.0
registry.gitlab.com/prisme.ai/prisme.ai/prisme.ai-runtime:prod47f685b79ca5
multer@2.3.0
2.5.0
registry.gitlab.com/prisme.ai/prisme.ai/prisme.ai-workspaces:prodaf61bebe8939
multer@2.3.0
2.5.0

Open the chart page →

6,137
redisinsightredisinsightVerified publisher0.1.01 of 1See more

redisinsight redisinsight 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-113872.

Container imageDigestPackageFixed in
redis/redisinsight:latestb5e19ee240ab
multer@2.0.2
2.5.0

Open the chart page →

1,434
seerr-chartseerr-chartVerified publisher3.10.11 of 1See more

seerr-chart seerr-chart 3.10.1

1 of the 1 container images this version deploys carry CVE-2026-113872.

Container imageDigestPackageFixed in
ghcr.io/seerr-team/seerr:v3.5.1d8fab675b55a
multer@2.1.1
2.5.0

Open the chart page →

2,314
retail-store-sample-checkout-chartstacksimplifyVerified publisher1.0.01 of 1See more

retail-store-sample-checkout-chart stacksimplify 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-113872.

Container imageDigestPackageFixed in
public.ecr.aws/aws-containers/retail-store-sample-checkout:1.3.0687aa68dd490
multer@2.0.1
2.5.0

Open the chart page →

1,590
thanhvt27-lab-k8sthanh-vtVerified publisher0.1.41 of 5See more

thanhvt27-lab-k8s thanh-vt 0.1.4

1 of the 5 container images this version deploys carry CVE-2026-113872.

Container imageDigestPackageFixed in
redis/redisinsight:latestb5e19ee240ab
multer@2.0.2
2.5.0

Open the chart page →

6,202
twentytwenty-crm0.1.111 of 4See more

twenty twenty-crm 0.1.11

1 of the 4 container images this version deploys carry CVE-2026-113872.

Container imageDigestPackageFixed in
twentycrm/twenty:v2.22.0e7d9948bf284
multer@2.2.0
2.5.0

Open the chart page →

7,005
evershopunifieVerified publisher1.0.01 of 1See more

evershop unifie 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-113872.

Container imageDigestPackageFixed in
evershop/evershop:latest2acdcd7ed59f
multer@2.4.0
2.5.0

Open the chart page →

925
excalidashunxwaresVerified publisher2026.10.11 of 2See more

excalidash unxwares 2026.10.1

1 of the 2 container images this version deploys carry CVE-2026-113872.

Container imageDigestPackageFixed in
zimengxiong/excalidash-backend:0.6.529937c62fbed
multer@2.4.0
2.5.0

Open the chart page →

692
evolution-apivcnngrVerified publisher1.0.01 of 5See more

evolution-api vcnngr 1.0.0

1 of the 5 container images this version deploys carry CVE-2026-113872.

Container imageDigestPackageFixed in
evoapicloud/evolution-api:latest966625532d90
multer@2.0.2
2.5.0

Open the chart page →

5,216
devportalveecode-platform-nextVerified publisher1.1.21 of 1See more

devportal veecode-platform-next 1.1.2

1 of the 1 container images this version deploys carry CVE-2026-113872.

Container imageDigestPackageFixed in
veecode/devportaldigest-pinned726cc70543dd
multer@2.4.0
2.5.0

Open the chart page →

1,769
n8nvictorlane1.0.181 of 1See more

n8n victorlane 1.0.18

1 of the 1 container images this version deploys carry CVE-2026-113872.

Container imageDigestPackageFixed in
n8nio/n8n:1.115.1ed16e560c40e
multer@2.0.2
2.5.0

Open the chart page →

8,145
twenty-crmvictorlane0.0.11 of 3See more

twenty-crm victorlane 0.0.1

1 of the 3 container images this version deploys carry CVE-2026-113872.

Container imageDigestPackageFixed in
twentycrm/twenty:latest91793759486e
multer@2.4.0
2.5.0

Open the chart page →

72,567
sirenwateim1.0.21 of 1See more

siren wateim 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-113872.

Container imageDigestPackageFixed in
sigp/siren:v3.0.42c219b04758e
multer@2.0.1
2.5.0

Open the chart page →

6,674

Container images carrying it

69 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
redis/redisinsight:3.8:latestb5e19ee240ab
multer@2.0.2
2.5.0
4
ghcr.io/seerr-team/seerr:latest:v3.5.027602401178d
multer@2.1.1
2.5.0
3
library/ghost:6.71.000032f157262
multer@2.4.0
2.5.0
2
n8nio/n8n:2.36.714c4285bc303
multer@2.2.0
2.5.0
2
nodered/node-red:5.0.9e085d4a06591
multer@2.4.0
2.5.0
2
ghcr.io/immich-app/immich-server:v3.1.0b434cb9287ee
multer@2.2.0
2.5.0
2
chocobozzz/peertube:v8.1.5052712130691
multer@2.1.1
2.5.0
1
codiacimages/codiac-cluster-agent:1.0.380cd44ca7a7ee
multer@2.0.2
2.5.0
1
epam/ai-dial-chat:1.2.4df205138325d
multer@2.4.0
2.5.0
1
evershop/evershop:latest2acdcd7ed59f
multer@2.4.0
2.5.0
1
evoapicloud/evolution-api:latest966625532d90
multer@2.0.2
2.5.0
1
fiware/biz-ecosystem-logic-proxy:11.20.3d551a13e8278
multer@2.0.1
2.5.0
1
ghostfolio/ghostfolio:3.88.0256c524a6116
multer@2.4.0
2.5.0
1
ghostfolio/ghostfolio:3.7.0e3c6ab53e49b
multer@2.1.1
2.5.0
1
hoppscotch/hoppscotch:2026.9.03160f5b3acf4
multer@2.3.0
2.5.0
1
library/ghost:6.37.01ef2e532ca4d
multer@2.1.1
2.5.0
1
library/ghost:6.25.12654b1e90413
multer@2.1.1
2.5.0
1
library/ghost:6.41.129773d6be407
multer@2.1.1
2.5.0
1
library/ghost:6.71.0-alpine8e07c5ec63d9
multer@2.4.0
2.5.0
1
library/ghost:6.72.0c0d83a8d4522
multer@2.4.0
2.5.0
1
library/ghost:6.69.0-alpine3.23db4c56c196d6
multer@2.4.0
2.5.0
1
luligu/matterbridge:3.10.1447f86fe9ae00
multer@2.4.0
2.5.0
1
mitre/heimdall2:release-latest06f6e72d416a
multer@2.2.0
2.5.0
1
n8nio/n8n:2.25.7761374d4eb84
multer@2.1.1
2.5.0
1
n8nio/n8n:2.41.687e0bab2c931
multer@2.3.0
2.5.0
1
n8nio/n8n:2.45.3bf88c3783fc4
multer@2.3.0
2.5.0
1
n8nio/n8n:2.44.4c72fa9f1bd9b
multer@2.3.0
2.5.0
1
n8nio/n8n:2.36.8cfe2704ff858
multer@2.2.0
2.5.0
1
n8nio/n8n:1.115.1ed16e560c40e
multer@2.0.2
2.5.0
1
nocodb/nocodb:0.301.5d9516f0bf546
multer@2.0.2
2.5.0
1
nocodb/nocodb:lateste8fee91b205b
multer@2.4.0
2.5.0
1
nodered/node-red:5.0.410f40d0a83e7
multer@2.2.0
2.5.0
1
nodered/node-red:4.1.2216e7403aab9
multer@2.0.2
2.5.0
1
nodered/node-red:5.0.8:latestb5adb6c9dd29
multer@2.4.0
2.5.0
1
nodered/node-red:4.1.10-minimald73ae167cb9b
multer@2.1.1
2.5.0
1
oneuptime/nginx:release64cc9c60a76a
multer@2.4.0
2.5.0
1
oneuptime/probe:releasedd75b4631455
multer@2.4.0
2.5.0
1
oneuptime/runner:releasea99da95a0490
multer@2.4.0
2.5.0
1
redis/redisinsight:3.2.055542a762210
multer@2.0.2
2.5.0
1
redis/redisinsight:3.485562d67a912
multer@2.0.2
2.5.0
1
rocketadmin/rocketadmin:1.23.70bd1abb0bfd1
multer@2.1.1
2.5.0
1
sigp/siren:v3.0.42c219b04758e
multer@2.0.1
2.5.0
1
twentycrm/twenty:v2.49.080e1b33b0b4b
multer@2.4.0
2.5.0
1
twentycrm/twenty:latest91793759486e
multer@2.4.0
2.5.0
1
twentycrm/twenty:v2.22.0e7d9948bf284
multer@2.2.0
2.5.0
1
veecode/devportal726cc70543dd
multer@2.4.0
2.5.0
1
zimengxiong/excalidash-backend:0.6.60ac551ef3dab
multer@2.4.0
2.5.0
1
zimengxiong/excalidash-backend:0.6.529937c62fbed
multer@2.4.0
2.5.0
1
zwavejs/zwave-js-ui:11.25.152462f5cb50b
multer@2.4.0
2.5.0
1
ghcr.io/antoniolago/vaultwarden-kubernetes-secrets:0.0.0-main13e267ad7d94
multer@2.0.2
2.5.0
1

syft 1.42.1 · advisories as of 24 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.