express-fileupload < 1.1.8 - Denial of Service and Remote Code Execution via Corrupt HTTP Request
This affects the package express-fileupload before 1.1.8. If the parseNested option is enabled, sending a corrupt HTTP request can lead to denial of service or arbitrary code execution.