StackRadar

CVE-2026-5079

High

Advisory

Published 17 Jun 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.003
20th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
120
of 17,781 indexed, latest versions
Container images
119
deployed by those charts
Fix available
1 of 1
affected package

Multer vulnerable to Denial of Service via deeply nested field names

Carried by container images the latest versions of 120 of 17,781 indexed charts deploy, on 119 images.

Affected packageAffected versionsFixed inImages
multernpm1.3.0, 1.4.1, 1.4.2, 1.4.3+7 more2.2.0119
OSV records
GHSA-72gw-mp4g-v24j

Charts affected

120 by stars
ChartLatestAffected imagesRadar Score
redisinsightredisinsightVerified publisher0.1.01 of 1See more

redisinsight redisinsight 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-5079.

Container imageDigestPackageFixed in
redis/redisinsight:latestb5e19ee240ab
multer@2.0.2
2.2.0

Open the chart page →

1,038
redisinsightredisinsight-helmVerified publisher0.1.11 of 1See more

redisinsight redisinsight-helm 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-5079.

Container imageDigestPackageFixed in
redis/redisinsight:2.46699d341bd329
multer@1.4.4-lts.1
2.2.0

Open the chart page →

1,884
relfinder-reformedrelfinderreformed2.0.01 of 2See more

relfinder-reformed relfinderreformed 2.0.0

1 of the 2 container images this version deploys carry CVE-2026-5079.

Container imageDigestPackageFixed in
ghcr.io/woodenmaiden/relfinderreformedapi:1.1.20708d30433d4
multer@1.4.4-lts.1
2.2.0

Open the chart page →

6,282
safe-stacksafe-global0.1.01 of 9See more

safe-stack safe-global 0.1.0

1 of the 9 container images this version deploys carry CVE-2026-5079.

Container imageDigestPackageFixed in
safeglobal/safe-client-gateway-nest:v1.51.012ccfd93fcaf
multer@1.4.4-lts.1
2.2.0

Open the chart page →

19,560
unifi-protectschichtelVerified publisher0.10.11 of 1See more

unifi-protect schichtel 0.10.1

1 of the 1 container images this version deploys carry CVE-2026-5079.

Container imageDigestPackageFixed in
markdegroot/unifi-protect-arm64:latestd8445f2a0de6
multer@1.4.5-lts.1
2.2.0

Open the chart page →

5,582
seerr-chartseerr-chartVerified publisher3.9.11 of 1See more

seerr-chart seerr-chart 3.9.1

1 of the 1 container images this version deploys carry CVE-2026-5079.

Container imageDigestPackageFixed in
ghcr.io/seerr-team/seerr:v3.4.1f4768de5f616
multer@2.1.1
2.2.0

Open the chart page →

1,991
retail-store-sample-checkout-chartstacksimplifyVerified publisher1.0.01 of 1See more

retail-store-sample-checkout-chart stacksimplify 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-5079.

Container imageDigestPackageFixed in
public.ecr.aws/aws-containers/retail-store-sample-checkout:1.3.0687aa68dd490
multer@2.0.1
2.2.0

Open the chart page →

1,313
chatqnatest-opea1.0.01 of 11See more

chatqna test-opea 1.0.0

1 of the 11 container images this version deploys carry CVE-2026-5079.

Container imageDigestPackageFixed in
redis/redis-stack:7.2.0-v91c5f43fddcdd
multer@1.4.4-lts.1
2.2.0

Open the chart page →

39,090
redis-vector-dbtest-opea1.0.01 of 1See more

redis-vector-db test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-5079.

Container imageDigestPackageFixed in
redis/redis-stack:7.2.0-v91c5f43fddcdd
multer@1.4.4-lts.1
2.2.0

Open the chart page →

5,604
vehicle-dashboardtest-vehi-dash0.1.01 of 7See more

vehicle-dashboard test-vehi-dash 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-5079.

Container imageDigestPackageFixed in
samajh/alprbackend:latestea742b4372ad
multer@1.4.4
2.2.0

Open the chart page →

20,270
node-redth0ths-helm-charts0.2.11 of 2See more

node-red th0ths-helm-charts 0.2.1

1 of the 2 container images this version deploys carry CVE-2026-5079.

Container imageDigestPackageFixed in
th0th/node-red:4.0.3-debiand06fa39f7406
multer@1.4.5-lts.1
2.2.0

Open the chart page →

2,408
thanhvt27-lab-k8sthanh-vtVerified publisher0.1.41 of 5See more

thanhvt27-lab-k8s thanh-vt 0.1.4

1 of the 5 container images this version deploys carry CVE-2026-5079.

Container imageDigestPackageFixed in
redis/redisinsight:latestb5e19ee240ab
multer@2.0.2
2.2.0

Open the chart page →

4,661
node-redthl-chartsVerified publisher0.1.01 of 1See more

node-red thl-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-5079.

Container imageDigestPackageFixed in
nodered/node-red:3.0.2-18e2632a7a35dd
multer@1.4.5-lts.1
2.2.0

Open the chart page →

2,806
tfy-distributortruefoundryVerified publisher0.0.11 of 4See more

tfy-distributor truefoundry 0.0.1

1 of the 4 container images this version deploys carry CVE-2026-5079.

Container imageDigestPackageFixed in
public.ecr.aws/truefoundrycloud/async-service-distributor:5d48113bc678d694a0c8f8dabb2207c5aa2cfc53f74851ce31f5
multer@1.4.4-lts.1
2.2.0

Open the chart page →

17,323
excalidashunxwaresVerified publisher2026.2.51 of 2See more

excalidash unxwares 2026.2.5

1 of the 2 container images this version deploys carry CVE-2026-5079.

Container imageDigestPackageFixed in
zimengxiong/excalidash-backend:0.4.271273af713c91
multer@2.0.2
2.2.0

Open the chart page →

2,620
evolution-apivcnngrVerified publisher1.0.01 of 5See more

evolution-api vcnngr 1.0.0

1 of the 5 container images this version deploys carry CVE-2026-5079.

Container imageDigestPackageFixed in
evoapicloud/evolution-api:latest966625532d90
multer@2.0.2
2.2.0

Open the chart page →

3,746
simple-prima-notavcnngrVerified publisher0.5.31 of 4See more

simple-prima-nota vcnngr 0.5.3

1 of the 4 container images this version deploys carry CVE-2026-5079.

Container imageDigestPackageFixed in
vcnngr/pnbackend:latesteaf44ad0ad1f
multer@1.4.5-lts.2
2.2.0

Open the chart page →

4,768
sirenwateim1.0.21 of 1See more

siren wateim 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-5079.

Container imageDigestPackageFixed in
sigp/siren:v3.0.42c219b04758e
multer@2.0.1
2.2.0

Open the chart page →

5,984
wikiwikijs3.0.01 of 2See more

wiki wikijs 3.0.0

1 of the 2 container images this version deploys carry CVE-2026-5079.

Container imageDigestPackageFixed in
requarks/wiki:268f0d1848261
multer@1.4.4
2.2.0

Open the chart page →

5,459
workadventureworkadventure1.1.02 of 9See more

workadventure workadventure 1.1.0

2 of the 9 container images this version deploys carry CVE-2026-5079.

Container imageDigestPackageFixed in
thecodingmachine/workadventure-map-storage:v1.17.75bdab56da2fa
multer@1.4.5-lts.1
2.2.0
thecodingmachine/workadventure-uploader:v1.17.73ccd467543b3
multer@1.4.5-lts.1
2.2.0

Open the chart page →

16,083

Container images carrying it

119 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/immich-app/immich-server:v2.3.1f8d06a32b1b2
multer@2.0.2
2.2.0
1
ghcr.io/jordan-dalby/bytestash:1.5.12eb4f736b8cd4
multer@1.4.5-lts.2
2.2.0
1
ghcr.io/lerentis/bitwarden-crd-operator:0.17.00a608c6ead85
multer@1.4.5-lts.2
2.2.0
1
ghcr.io/linuxserver/wikijs:version-2.5.20158d377933678
multer@1.4.2
2.2.0
1
ghcr.io/m9sweeper/dash:1.6.02e27cdff8344
multer@1.4.4-lts.1
2.2.0
1
ghcr.io/manzil-infinity180/backend-dumpstore:226f28ca3efa6d3691044813cd09085e28d4a7b496c90cf82fdd
multer@1.4.5-lts.2
2.2.0
1
ghcr.io/mcwarman/backstage-sample-app/backend:main07aba09a594f
multer@1.4.5-lts.1
2.2.0
1
ghcr.io/rodg/nodecg-base:latest31be4bf87070
multer@1.4.5-lts.1
2.2.0
1
ghcr.io/sct/overseerr:1.26.1254d16af8f71
multer@1.4.2
2.2.0
1
ghcr.io/sct/overseerr:1.35.06197516c9d7b
multer@1.4.5-lts.1
2.2.0
1
ghcr.io/seerr-team/seerr:v3.2.0c4cbd5121236
multer@1.4.5-lts.1
2.2.0
1
ghcr.io/solucteam/outscale-s3-explorer:v1.0.09665c3e71889
multer@1.4.5-lts.2
2.2.0
1
ghcr.io/woodenmaiden/relfinderreformedapi:1.1.20708d30433d4
multer@1.4.4-lts.1
2.2.0
1
public.ecr.aws/aws-containers/retail-store-sample-checkout:1.3.0687aa68dd490
multer@2.0.1
2.2.0
1
public.ecr.aws/jtekt-corporation/image-storage-service:v1.16.17b1493760c716
multer@1.4.5-lts.1
2.2.0
1
public.ecr.aws/truefoundrycloud/async-service-distributor:5d48113bc678d694a0c8f8dabb2207c5aa2cfc53f74851ce31f5
multer@1.4.4-lts.1
2.2.0
1
quay.io/seamware/onboarding:0.2.2b406475f9f00
multer@2.0.2
2.2.0
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-backend:1.0.31c7afac3446d6
multer@2.1.1
2.2.0
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-user:1.0.31d8a9cd4e1ae3
multer@2.1.1
2.2.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.