Skip to content
Threat Feed
Subscribe

Product

@Adonisjs/Bodyparser (<= 10.1.1, 11.0.0-Next.1 - 11.0.0-Next.5)

1 brief RSS
high advisory

AdonisJS Bodyparser: Arbitrary file write via path traversal (CVE-2026-21440)

An unauthenticated remote path traversal vulnerability in @adonisjs/bodyparser (CVE-2026-21440) allows attackers to write arbitrary files to the filesystem via malicious multipart/form-data filenames.

@adonisjs/bodyparser
1r 1t 1c