`multer@1.4.5-lts.1` security vulnerabilities

Question

Closed this issue 3 months ago · 4 comments

Hi,

The version of the multer package published in 0.11.2 has reported 2 high vulnerabilities via Snyk.

This has been addressed in v2 of multer.

This dependency bump was merged into the repo yesterday.

Can you please release a new version to NPM with this in.

Thanks

Answer 1 · 2025-06-25T08:02:36.000Z

Hi, we have the same problem with multer version and just want to know when we can expect release with this issue fix?

Answer 2 · 2025-06-25T08:13:46.000Z

waiting for a fix for the the vulnarability reported by snyk
https://security.snyk.io/vuln/SNYK-JS-MULTER-10299078
Could you please upgrade the multer version to multer@2.0.1 and release a new version?

Answer 3 · 2025-07-14T13:13:03.000Z

Waiting for a fix for this vulnerability issue. Can someone please upgrade the version

Answer 4 · 2025-09-07T01:54:32.000Z

This issue has been automatically locked since there has not been any recent activity after it was closed. Please open a new issue for related bugs.