VDB
RHSA-2026:49642
RHSA-2026:49642
PUBLISHED
CVSS 8.100000381469727 HIGH
A flaw was found in multer. This vulnerability allows a remote attacker to trigger a Denial of Service (DoS) by initiating and then aborting or sending malformed multipart uploads. This action leaves orphaned partial files on the disk, which can lead to the exhaustion of available disk space without requiring any specific application bug.
Risk Scores
CVSS 3.1
8.100000381469727
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:d72d8450a0b3413ca7d115a18037a06400072f0ea8a9994677c8670f82712300_amd64 as a component of Red Hat Developer Hub 1.10 | * |
| Red Hat | registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:efb115e54a4a288615b4539726e265e51b0049339c432dd511c049985c710dbd_amd64 as a component of Red Hat Developer Hub 1.10 | * |
| Red Hat | registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:08883fc7f9806289ecec95f75d4e9ee5c44a12ff372252e10398293c78b0514f_amd64 as a component of Red Hat Developer Hub 1.10 | * |
| Red Hat | registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:483b26f157935484470e7d494467763c3fe6f1f70e0ee780a17644ccb3f516e1_amd64 as a component of Red Hat Developer Hub 1.10 | * |
| Red Hat | registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:c0aa60b0f991c016062b069073a511558f3bdea44d10a1144baa5d6a7f9a4c3d_amd64 as a component of Red Hat Developer Hub 1.10 | * |
Timeline
- Aug 3, 2026 CVE Published
- Aug 24, 2026 CVE Updated
- Aug 24, 2026 Distribution Patch
- Aug 24, 2026 Distribution Patch
- Aug 24, 2026 Security Advisory
- Aug 24, 2026 Security Advisory
- Aug 24, 2026 Security Advisory
- Aug 24, 2026 Security Advisory
- Aug 24, 2026 Security Advisory
- Aug 24, 2026 Security Advisory
- Aug 24, 2026 Security Advisory
- Aug 24, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2026:49642 advisory
- https://access.redhat.com/security/cve/CVE-2026-13149 advisory
- https://access.redhat.com/security/cve/CVE-2026-13676 advisory
- https://access.redhat.com/security/cve/CVE-2026-42504 advisory
- https://access.redhat.com/security/cve/CVE-2026-45740 advisory
- https://access.redhat.com/security/cve/CVE-2026-46625 advisory
- https://access.redhat.com/security/cve/CVE-2026-48068 advisory
- https://access.redhat.com/security/cve/CVE-2026-48069 advisory
- https://access.redhat.com/security/cve/CVE-2026-48801 advisory
- https://access.redhat.com/security/cve/CVE-2026-49978 advisory
- https://access.redhat.com/security/cve/CVE-2026-5038 advisory
- https://access.redhat.com/security/cve/CVE-2026-5079 advisory
- https://access.redhat.com/security/cve/CVE-2026-59869 advisory
- https://access.redhat.com/security/cve/CVE-2026-59877 advisory
- https://access.redhat.com/security/cve/CVE-2026-59892 advisory
- https://access.redhat.com/security/updates/classification/ advisory
- https://catalog.redhat.com/search?gs&searchType=containers&q=rhdh advisory
- https://developers.redhat.com/rhdh/overview advisory
- https://docs.redhat.com/en/documentation/red_hat_developer_hub advisory
- https://redhat.atlassian.net/browse/RHDHBUGS-3455 advisory
…and 93 more