multer
2.5.0 · 22 Oct 2026MIT30.7M / weekRepositoryHomepagenpmAtom feed
Upgrading multer From 2.3.0 to 2.5.0
2 releases in betweenevery note read
- 0
- changes to make
- 2
- advisories fixed
- 5
- new
- 11
- fixes
Security
Fixes 2 advisories affecting 2.3.0
- multer vulnerable to Denial of Service via orphaned disk writes on aborted uploadsmoderate · GHSA-3pph-fpjx-jg34
- multer vulnerable to Denial of Service via a pending asynchronous fileFilter after request teardownhigh · GHSA-q7qp-rjg7-q26m
- 2.5.0
- 2.4.0
Release by release
- security
- fixed
Don't add a failed upload to the abort cleanup list
- fixed
Allow a field value exactly at the fieldSize limit
- security
- new
Add filename to file errors
- new
Accept a function for limits
- new
Expose busboy defCharset, highWaterMark and fileHwm options
1 other line we could not sort, mostly version bumps
- 2.4.0
Feat. improve wording for LIMIT_UNEXPECTED_FILE error code
15 internal lines (docs, tests, tooling) left out.