CVE-2020-8136: Fastify Fastify-Multipart

High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days.

Prototype pollution vulnerability in fastify-multipart < 1.0.5 allows an attacker to crash fastify applications parsing multipart requests by sending a specially crafted request.

Affected products

• Fastify Fastify-Multipart: before 1.0.5 (fixed in 1.0.5)

Published 2020-03-20. Last modified 2026-06-17.