multer
2.5.0 · 22 Oct 2026MIT30.7M / weekRepositoryHomepagenpmAtom feed
Your version
In short
1 security2 fixed5 internal
Security
Fixes 1 advisory that affected 2.4.0
- Highmulter vulnerable to Denial of Service via a pending asynchronous fileFilter after request teardownGHSA-q7qp-rjg7-q26m · 23 Oct 2026Fixed in 2.5.0
Release note
Important: Security
- security
What's Changed
Don't add a failed upload to the abort cleanup list
Allow a field value exactly at the fieldSize limit