{"api_version":"v1","generated_at":"2026-10-06T10:30:00+00:00","product":{"cve_count":4,"evidence_gap_note":"Official registry publication history is linked, but a publisher support or retirement boundary has not been established.","id":"security:cve-multiparty-multiparty-28b1608ab83c","lifecycle_state":"evidence_gap","linked_lifecycle_url":"https://lifecycle.blacktree.nl/libraries/npm/multiparty","name":"multiparty","next_cursor":null,"observations":[{"affected":"multiparty: 2.1.0 < 4.3.1","affected_versions_present":true,"cve_id":"CVE-2026-87908","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-87908","fixed":"multiparty: 4.3.1","last_modified":"2026-09-11T15:54:32.991Z","patch_url":"https://github.com/pillarjs/multiparty/security/advisories/GHSA-5h46-2939-q3wh","primary_source":"","published":"2026-09-11T06:37:51.216Z"},{"affected":"\u2264 4.2.3","affected_versions_present":true,"cve_id":"CVE-2026-8162","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-8162","fixed":"4.3.0","last_modified":"2026-05-12T12:33:12.647Z","patch_url":"https://github.com/pillarjs/multiparty/security/advisories/GHSA-xh3c-6gcq-g4rv","primary_source":"","published":"2026-05-12T09:05:12.591Z"},{"affected":"\u2264 4.2.3","affected_versions_present":true,"cve_id":"CVE-2026-8161","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-8161","fixed":"4.3.0","last_modified":"2026-05-12T12:32:10.127Z","patch_url":"https://github.com/pillarjs/multiparty/security/advisories/GHSA-qxch-whhj-8956","primary_source":"","published":"2026-05-12T08:50:37.685Z"},{"affected":"\u2264 4.2.3","affected_versions_present":true,"cve_id":"CVE-2026-8159","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-8159","fixed":"4.3.0","last_modified":"2026-05-12T12:33:59.418Z","patch_url":"https://github.com/pillarjs/multiparty/security/advisories/GHSA-65x3-rw7q-gx94","primary_source":"","published":"2026-05-12T08:35:39.564Z"}],"source_generated_at":"2026-10-06T06:22:27.870Z","vendor":"multiparty"}}