multer
2.5.0 · 22 Oct 2026MIT30.7M / weekRepositoryHomepagenpmAtom feed
2.5.0 is the newest release of 2.x.
In short
1 security1 new1 fixed14 changed11 internal
Security
Fixes 1 advisory that affected 2.0.0
- HighMulter vulnerable to Denial of Service via unhandled exceptionGHSA-g5hg-p3ph-g8qg · 5 Jun 2025Fixed in 2.0.1
10 advisories affect 2.0.1; 2.5.0 fixes them
- Highmulter vulnerable to Denial of Service via a pending asynchronous fileFilter after request teardownGHSA-q7qp-rjg7-q26m · 23 Oct 2026Fixed in 2.5.0
- Highmulter vulnerable to Denial of Service via crafted multipart field namesGHSA-wc9g-mqfw-jrwm · 8 Sep 2026Fixed in 2.3.0
- Highmulter vulnerable to Denial of Service via oversized array index in field namesGHSA-535w-7cp7-47q4 · 8 Sep 2026Fixed in 2.3.0
- HighMulter vulnerable to Denial of Service via deeply nested field namesGHSA-72gw-mp4g-v24j · 17 Jun 2026Fixed in 2.2.0
- HighMulter Vulnerable to Denial of Service via Uncontrolled RecursionGHSA-5528-5vmv-3xc2 · 5 Mar 2026Fixed in 2.1.1
5 more
- HighMulter vulnerable to Denial of Service via incomplete cleanupGHSA-xf7r-hgr6-v32p · 1 Mar 2026Fixed in 2.1.0
- HighMulter vulnerable to Denial of Service via resource exhaustionGHSA-v52c-386h-88mc · 1 Mar 2026Fixed in 2.1.0
- HighMulter vulnerable to Denial of Service via unhandled exception from malformed requestGHSA-fjgf-rc76-4x9p · 17 Jul 2025Fixed in 2.0.2
- ModerateMulter vulnerable to Denial of Service via incomplete cleanup of aborted uploadsGHSA-3p4h-7m6x-2hcm · 17 Jun 2026Fixed in 2.2.0
- Lowmulter vulnerable to file size limit bypass via async fileFilter race conditionGHSA-qvfw-j98x-7q72 · 8 Sep 2026Fixed in 2.3.0
Release note
Important
- security
What's Changed
Add Arabic translation for README ..
Update README.md to fix issue #1114
Improved documentation translation to Spanish
Translated to french
Improve the Brazilian Portuguese translation
Fix a mistake with README-pt-br.md
Update in Readme-pt-br and fix in Readme-ko
Documentation: Remove unfortunate abbreviation from readme
Update readme badges
📝 fix changelog information
Master -> v2
Remove --save from README
Feat - update link badge in docs
♻️ use version tag for CI, fix CI badge, fix references to master/main
📝 list languages in table to prevent GH right-aligning list due to RTL language
Apply security best practices