multer
2.5.0 · 22 Oct 2026MIT30.7M / weekRepositoryHomepagenpmAtom feed
Upgrading multer From 1.4.0 to 1.4.4
4 releases in betweenevery note read
- 0
- changes to make
- 0
- advisories fixed
- 0
- new
- 2
- fixes
Security
11 advisories still affect 1.4.4
- Multer vulnerable to Denial of Service via memory leaks from unclosed streamshigh · GHSA-44fp-w29j-9vj5
- Multer vulnerable to Denial of Service from maliciously crafted requestshigh · GHSA-4pg4-qvpc-4q3h
- multer vulnerable to Denial of Service via oversized array index in field nameshigh · GHSA-535w-7cp7-47q4
Upgrading to 2.3.0 clears them.
Release by release
- fixed
Bugfix: Handle missing field names
- fixed
- fixed
Bugfix: Avoid deprecated pseudoRandomBytes function
- fixed
1.4.1 – 1.4.22 releases, nothing new or fixed in the notes
1 other line we could not sort, mostly version bumps
- 1.4.1
Bugfix: Make sure that req.file.buffer always is a Buffer
19 internal lines (docs, tests, tooling) left out.