UlisesGascon

@fastify/http-proxy vulnerable to prefix escape via backslash dot-segments

multer vulnerable to Denial of Service via file descriptor leak on aborted uploads

multer vulnerable to file size limit bypass via async fileFilter race condition

multer vulnerable to Denial of Service via crafted multipart field names

multer vulnerable to Denial of Service via oversized array index in field names

morgan vulnerable to Log Forging via unescaped Unicode line separators

fast-uri vulnerable to host confusion via skipped IDN canonicalization on scheme-relative references

fast-uri vulnerable to server-side request forgery via repeated hostname percent-decoding

fast-uri vulnerable to server-side request forgery via malformed IPv6 normalization

fast-uri vulnerable to host confusion via percent-encoded scheme normalization