[GHSA] GHSA-535w-7cp7-47q4 (high) — multer vulnerable to Denial of Service via oversized array index in field names

GHSA-535w-7cp7-47q4 Severity: high CVE: CVE-2026-82333

multer vulnerable to Denial of Service via oversized array index in field names

### Impact

multer is vulnerable to a Denial of Service (DoS) via a crafted array index in multipart field names. The `append-field` dependency parses bracket notation in field names, and a large numeric index such as `items[4294967294]` forces allocation of a ma