multer
2.5.0 · 22 Oct 2026MIT30.7M / weekRepositoryHomepagenpmAtom feed
Upgrading multer From 2.1.1 to 2.2.0
1 release in betweenevery note read
Other targets from 2.1.1Newest 2.x, Clears its 6 advisories, Latest2.5.0
- 0
- changes to make
- 2
- advisories fixed
- 0
- new
- 0
- fixes
Security
6 advisories still affect 2.2.0
- multer vulnerable to Denial of Service via orphaned disk writes on aborted uploadsmoderate · GHSA-3pph-fpjx-jg34
- multer vulnerable to Denial of Service via oversized array index in field nameshigh · GHSA-535w-7cp7-47q4
- multer vulnerable to Denial of Service via a pending asynchronous fileFilter after request teardownhigh · GHSA-q7qp-rjg7-q26m
Upgrading to 2.5.0 clears them.
Fixes 2 advisories affecting 2.1.1
- Multer vulnerable to Denial of Service via incomplete cleanup of aborted uploadsmoderate · GHSA-3p4h-7m6x-2hcm
- Multer vulnerable to Denial of Service via deeply nested field nameshigh · GHSA-72gw-mp4g-v24j
- 2.2.0
- 2.2.0
5 internal lines (docs, tests, tooling) left out.