CVE-2022-27261 - medium detected in express-fileupload['0.0.5']

[github-actions]

Package Name: express-fileupload
Package Version: ['0.0.5']
Package Manager: npm
Target File: package.json
Severity Level: medium
Snyk ID: SNYK-JS-EXPRESSFILEUPLOAD-2635946
Snyk CVE: CVE-2022-27261
Snyk CWE: CWE-434
Link to issue in Snyk: https://app.snyk.io/org/cse_rhicksiii91/project/14f822de-b806-4bd7-9ad2-767a7feebe1d

Snyk Description: ## Overview
express-fileupload is a file upload middleware for express that wraps around busboy.

Affected versions of this package are vulnerable to Arbitrary File Upload when it is possible for attackers to upload multiple files with the same name, causing an overwrite of files in the web application server.

Remediation

There is no fixed version for express-fileupload.

References

• GitHub Issue
• GitHub Issue
• PoC