CPE
An unauthenticated remote attacker can crash Node.js applications using the multer package by sending a specifically crafted multipart/form-data request that triggers an uncaught RangeError.