VDB

CVE-2026-74866

CVE-2026-74866 PUBLISHED CVSS 5.800000190734863 MEDIUM

@fastify/busboy vulnerable to CRLF injection via multipart Content-Disposition filename and name

EPSS 0.33% · 25.7th percentile

Risk Scores

CVSS 3.1
5.800000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N
EPSS Score
0.33%
25.7th percentile

Affected Products

VendorProductVersions
chainguardcommercial-gitlab-rails-ee-19.20
chainguardcommercial-gitlab-rails-ee-19.30
chainguardlangfuse-fips-30
chainguardgitlab-rails-ce-fips-18.90
chainguardcommercial-gitlab-rails-ee-19.10
chainguardgitlab-rails-ce-fips-18.100
chainguardcommercial-gitlab-rails-ee-fips-19.30
@fastify/busboy@fastify/busboy0, 3.2.2
chainguardgitlab-rails-ce-fips-19.40
chainguardgitlab-rails-ce-fips-18.110
chainguardcommercial-gitlab-rails-ee-fips-19.20
chainguardgitlab-rails-ce-fips-19.20
chainguardgitlab-rails-ce-19.20
chainguardcommercial-gitlab-rails-ee-19.40
chainguardcommercial-gitlab-rails-ee-fips-19.40
chainguardgitlab-rails-ce-fips-19.30
chainguardgitlab-rails-ce-19.40
chainguardgitlab-rails-ce-fips-19.00
chainguardgitlab-rails-ce-19.30
chainguardgitlab-rails-ce-fips-19.10

…and 1 more

Timeline

  • Aug 21, 2026 EPSS Score
  • Aug 21, 2026 CVE Published
  • Aug 22, 2026 Coalition ESS Score
  • Aug 24, 2026 EPSS Score
  • Sep 9, 2026 EPSS Score
  • Sep 16, 2026 EPSS Score
  • Sep 24, 2026 EPSS Score
  • Sep 26, 2026 EPSS Score
  • Sep 30, 2026 EPSS Score
  • Oct 2, 2026 EPSS Score
  • Oct 5, 2026 CVE Updated
  • Oct 6, 2026 EPSS Score

References

Open in Interactive Console →
$ Console Community · 50/day Open console ›