StackRadar

CVE-2026-5079

High

Advisory

Published 17 Jun 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.003
20th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
121
of 17,787 indexed, latest versions
Container images
120
deployed by those charts
Fix available
1 of 1
affected package

Multer vulnerable to Denial of Service via deeply nested field names

Carried by container images the latest versions of 121 of 17,787 indexed charts deploy, on 120 images.

Affected packageAffected versionsFixed inImages
multernpm1.3.0, 1.4.1, 1.4.2, 1.4.3+7 more2.2.0120
OSV records
GHSA-72gw-mp4g-v24j

Charts affected

121 by stars
ChartLatestAffected imagesRadar Score
redisinsightredisinsightVerified publisher0.1.01 of 1See more

redisinsight redisinsight 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-5079.

Container imageDigestPackageFixed in
redis/redisinsight:latestb5e19ee240ab
multer@2.0.2
2.2.0

Open the chart page →

1,039
redisinsightredisinsight-helmVerified publisher0.1.11 of 1See more

redisinsight redisinsight-helm 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-5079.

Container imageDigestPackageFixed in
redis/redisinsight:2.46699d341bd329
multer@1.4.4-lts.1
2.2.0

Open the chart page →

1,884
relfinder-reformedrelfinderreformed2.0.01 of 2See more

relfinder-reformed relfinderreformed 2.0.0

1 of the 2 container images this version deploys carry CVE-2026-5079.

Container imageDigestPackageFixed in
ghcr.io/woodenmaiden/relfinderreformedapi:1.1.20708d30433d4
multer@1.4.4-lts.1
2.2.0

Open the chart page →

5,928
safe-stacksafe-global0.1.01 of 9See more

safe-stack safe-global 0.1.0

1 of the 9 container images this version deploys carry CVE-2026-5079.

Container imageDigestPackageFixed in
safeglobal/safe-client-gateway-nest:v1.51.012ccfd93fcaf
multer@1.4.4-lts.1
2.2.0

Open the chart page →

17,736
unifi-protectschichtelVerified publisher0.10.11 of 1See more

unifi-protect schichtel 0.10.1

1 of the 1 container images this version deploys carry CVE-2026-5079.

Container imageDigestPackageFixed in
markdegroot/unifi-protect-arm64:latestd8445f2a0de6
multer@1.4.5-lts.1
2.2.0

Open the chart page →

5,582
seerr-chartseerr-chartVerified publisher3.9.11 of 1See more

seerr-chart seerr-chart 3.9.1

1 of the 1 container images this version deploys carry CVE-2026-5079.

Container imageDigestPackageFixed in
ghcr.io/seerr-team/seerr:v3.4.1f4768de5f616
multer@2.1.1
2.2.0

Open the chart page →

1,991
retail-store-sample-checkout-chartstacksimplifyVerified publisher1.0.01 of 1See more

retail-store-sample-checkout-chart stacksimplify 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-5079.

Container imageDigestPackageFixed in
public.ecr.aws/aws-containers/retail-store-sample-checkout:1.3.0687aa68dd490
multer@2.0.1
2.2.0

Open the chart page →

1,313
chatqnatest-opea1.0.01 of 11See more

chatqna test-opea 1.0.0

1 of the 11 container images this version deploys carry CVE-2026-5079.

Container imageDigestPackageFixed in
redis/redis-stack:7.2.0-v91c5f43fddcdd
multer@1.4.4-lts.1
2.2.0

Open the chart page →

36,661
redis-vector-dbtest-opea1.0.01 of 1See more

redis-vector-db test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-5079.

Container imageDigestPackageFixed in
redis/redis-stack:7.2.0-v91c5f43fddcdd
multer@1.4.4-lts.1
2.2.0

Open the chart page →

5,652
vehicle-dashboardtest-vehi-dash0.1.01 of 7See more

vehicle-dashboard test-vehi-dash 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-5079.

Container imageDigestPackageFixed in
samajh/alprbackend:latestea742b4372ad
multer@1.4.4
2.2.0

Open the chart page →

20,362
node-redth0ths-helm-charts0.2.11 of 2See more

node-red th0ths-helm-charts 0.2.1

1 of the 2 container images this version deploys carry CVE-2026-5079.

Container imageDigestPackageFixed in
th0th/node-red:4.0.3-debiand06fa39f7406
multer@1.4.5-lts.1
2.2.0

Open the chart page →

2,408
thanhvt27-lab-k8sthanh-vtVerified publisher0.1.41 of 5See more

thanhvt27-lab-k8s thanh-vt 0.1.4

1 of the 5 container images this version deploys carry CVE-2026-5079.

Container imageDigestPackageFixed in
redis/redisinsight:latestb5e19ee240ab
multer@2.0.2
2.2.0

Open the chart page →

4,662
node-redthl-chartsVerified publisher0.1.01 of 1See more

node-red thl-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-5079.

Container imageDigestPackageFixed in
nodered/node-red:3.0.2-18e2632a7a35dd
multer@1.4.5-lts.1
2.2.0

Open the chart page →

2,805
tfy-distributortruefoundryVerified publisher0.0.11 of 4See more

tfy-distributor truefoundry 0.0.1

1 of the 4 container images this version deploys carry CVE-2026-5079.

Container imageDigestPackageFixed in
public.ecr.aws/truefoundrycloud/async-service-distributor:5d48113bc678d694a0c8f8dabb2207c5aa2cfc53f74851ce31f5
multer@1.4.4-lts.1
2.2.0

Open the chart page →

17,348
excalidashunxwaresVerified publisher2026.2.51 of 2See more

excalidash unxwares 2026.2.5

1 of the 2 container images this version deploys carry CVE-2026-5079.

Container imageDigestPackageFixed in
zimengxiong/excalidash-backend:0.4.271273af713c91
multer@2.0.2
2.2.0

Open the chart page →

2,622
evolution-apivcnngrVerified publisher1.0.01 of 5See more

evolution-api vcnngr 1.0.0

1 of the 5 container images this version deploys carry CVE-2026-5079.

Container imageDigestPackageFixed in
evoapicloud/evolution-api:latest966625532d90
multer@2.0.2
2.2.0

Open the chart page →

3,747
simple-prima-notavcnngrVerified publisher0.5.31 of 4See more

simple-prima-nota vcnngr 0.5.3

1 of the 4 container images this version deploys carry CVE-2026-5079.

Container imageDigestPackageFixed in
vcnngr/pnbackend:latesteaf44ad0ad1f
multer@1.4.5-lts.2
2.2.0

Open the chart page →

4,769
n8nvictorlane1.0.181 of 1See more

n8n victorlane 1.0.18

1 of the 1 container images this version deploys carry CVE-2026-5079.

Container imageDigestPackageFixed in
n8nio/n8n:1.115.1ed16e560c40e
multer@2.0.2
2.2.0

Open the chart page →

6,470
sirenwateim1.0.21 of 1See more

siren wateim 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-5079.

Container imageDigestPackageFixed in
sigp/siren:v3.0.42c219b04758e
multer@2.0.1
2.2.0

Open the chart page →

5,774
wikiwikijs3.0.01 of 2See more

wiki wikijs 3.0.0

1 of the 2 container images this version deploys carry CVE-2026-5079.

Container imageDigestPackageFixed in
requarks/wiki:268f0d1848261
multer@1.4.4
2.2.0

Open the chart page →

5,472
workadventureworkadventure1.1.02 of 9See more

workadventure workadventure 1.1.0

2 of the 9 container images this version deploys carry CVE-2026-5079.

Container imageDigestPackageFixed in
thecodingmachine/workadventure-map-storage:v1.17.75bdab56da2fa
multer@1.4.5-lts.1
2.2.0
thecodingmachine/workadventure-uploader:v1.17.73ccd467543b3
multer@1.4.5-lts.1
2.2.0

Open the chart page →

16,083

Container images carrying it

120 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
redis/redisinsight:3.8:latestb5e19ee240ab
multer@2.0.2
2.2.0
4
assistiot/dlt_api:2.0.0e36a8922fa0c
multer@1.4.5-lts.1
2.2.0
3
ghcr.io/seerr-team/seerr:latest:v3.4.1f4768de5f616
multer@2.1.1
2.2.0
3
governify/director:v1.4.0608c6940bb98
multer@1.4.3
2.2.0
2
governify/registry:v3.4.0d3f37f4f8168
multer@1.4.2
2.2.0
2
governify/reporter:v2.2.038595913458f
multer@1.4.2
2.2.0
2
hoppscotch/hoppscotch:2024.8.2f1da831950b7
multer@1.4.4-lts.1
2.2.0
2
redis/redis-stack:7.2.0-v91c5f43fddcdd
multer@1.4.4-lts.1
2.2.0
2
requarks/wiki:2:latest68f0d1848261
multer@1.4.4
2.2.0
2
tzahi12345/youtubedl-material:4.3.2:latest2f943d584711
multer@1.4.5-lts.1
2.2.0
2
anamskenneth/recipe_backend:2025-06-079b7d2cd389b7
multer@1.4.5-lts.1
2.2.0
1
assistiot/dlt_api:2.1.0c8a170683be7
multer@1.4.5-lts.1
2.2.0
1
automatischio/automatisch:0.15.03bace7a12d5f
multer@1.4.5-lts.1
2.2.0
1
bicarus/mx-api-service:1.0.2-hf1dab88659ae3b
multer@1.4.4-lts.1
2.2.0
1
browserless/chrome:1.48.0-chrome-stablec81ae5585b47
multer@1.4.3
2.2.0
1
chocobozzz/peertube:v8.1.5052712130691
multer@2.1.1
2.2.0
1
cryptexlabs/authf:0.12.11189c07411d7c
multer@1.4.4-lts.1
2.2.0
1
cyfershepard/jellystat:1.1.11c4e2dfa8bddf
multer@1.4.5-lts.2
2.2.0
1
dipugodocker/pdf-editor:1.0-frontendd431c37fe1cd
multer@1.4.5-lts.1
2.2.0
1
evoapicloud/evolution-api:latest966625532d90
multer@2.0.2
2.2.0
1
fallenbagel/jellyseerr:latest4538137bc5af
multer@1.4.5-lts.1
2.2.0
1
fallenbagel/jellyseerr:1.7.06dcdb5ba5091
multer@1.4.5-lts.1
2.2.0
1
fiware/biz-ecosystem-logic-proxy:11.20.3d551a13e8278
multer@2.0.1
2.2.0
1
fiware/idm:8.3.3a1b6ed4ae84f
multer@1.4.4
2.2.0
1
ghostfolio/ghostfolio:3.7.0e3c6ab53e49b
multer@2.1.1
2.2.0
1
glenndehaan/api-mapper:latest6ff6310683bf
multer@1.4.5-lts.1
2.2.0
1
glenndehaan/contentbridge:latest99b9e4f73848
multer@1.4.5-lts.1
2.2.0
1
governify/collector-dynamic:v1.3.06d3d1a5b46a9
multer@1.4.2
2.2.0
1
heywood8/redisinsight:2.28.00bc9ab313d37
multer@1.4.4-lts.1
2.2.0
1
hhaluk/crypto-watchdog:0.4.0a6555953d941
multer@1.4.2
2.2.0
1
hoppscotch/hoppscotch:2024.11.0538fe6ded4b6
multer@1.4.4-lts.1
2.2.0
1
ibmcom/bai-admin-dev:19.0.202d882f2836e
multer@1.4.1
2.2.0
1
jakowenko/double-take:1.6.0b858bac9e32a
multer@1.4.3
2.2.0
1
jayfong/yapi:1.10.2163e5d621910
multer@1.3.0
2.2.0
1
kubebb/bff-server:v0.2.0-202312040fbb732379bc
multer@1.4.4-lts.1
2.2.0
1
kubebb/component-store:latestfd8ecbd73213
multer@1.4.4-lts.1
2.2.0
1
library/ghost:6.37.01ef2e532ca4d
multer@2.1.1
2.2.0
1
library/ghost:6.25.12654b1e90413
multer@2.1.1
2.2.0
1
library/ghost:6.41.129773d6be407
multer@2.1.1
2.2.0
1
library/ghost:4.37.0767230c0f263
multer@1.4.4
2.2.0
1
library/ghost:6.39.0-alpine77196da4b0df
multer@2.1.1
2.2.0
1
library/ghost:5.79.083f7bf209844
multer@1.4.4
2.2.0
1
library/ghost:6.22.0-alpine3.23ac533a6988ee
multer@2.1.1
2.2.0
1
linuxserver/overseerr:1.35.06108ed066d4a
multer@1.4.5-lts.1
2.2.0
1
lukasreining/open-api-schema-collector:0.1.050e021c42e33
multer@1.4.4-lts.1
2.2.0
1
luligu/matterbridge:3.0.28f97884bebc2
multer@1.4.5-lts.2
2.2.0
1
markdegroot/unifi-protect-arm64:latestd8445f2a0de6
multer@1.4.5-lts.1
2.2.0
1
mishtinetwork/operator:latestbb3fe67a5f7c
multer@1.4.4-lts.1
2.2.0
1
misskey/misskey:12.110.1e08b7c478093
multer@1.4.4
2.2.0
1
moreillon/food-manager:lateste8fd856e593d
multer@1.4.4
2.2.0
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.