An open index of dependabot pull requests across open source projects.

multer

Ecosystem:
npm
Package URL:
pkg:npm/multer
Total PRs:
7,012 Dependabot PRs
Latest PR:
4 days ago
Unique Repositories:
4,433 repositories
Unique Repos (30 days):
49 repositories
Security Advisories
Multer vulnerable to Denial of Service via resource exhaustion
GHSA-v52c-386h-88mc CVE-2026-2359 HIGH published 3 months ago • updated 3 days ago
### Impact A vulnerability in Multer versions < 2.1.0 allows an attacker to trigger a Denial of Service (DoS) by dropping connection during file u...
Multer vulnerable to Denial of Service from maliciously crafted requests
GHSA-4pg4-qvpc-4q3h CVE-2025-47944 HIGH published about 1 year ago • updated 3 days ago
### Impact A vulnerability in Multer versions >=1.4.4-lts.1 allows an attacker to trigger a Denial of Service (DoS) by sending a malformed multi-pa...
Multer vulnerable to Denial of Service via unhandled exception
GHSA-g5hg-p3ph-g8qg CVE-2025-48997 HIGH published 12 months ago • updated about 2 months ago
### Impact A vulnerability in Multer versions >=1.4.4-lts.1, <2.0.1 allows an attacker to trigger a Denial of Service (DoS) by sending an upload f...
Multer vulnerable to Denial of Service via incomplete cleanup
GHSA-xf7r-hgr6-v32p CVE-2026-3304 HIGH published 3 months ago • updated 3 days ago
### Impact A vulnerability in Multer versions < 2.1.0 allows an attacker to trigger a Denial of Service (DoS) by sending malformed requests, poten...
Multer vulnerable to Denial of Service via memory leaks from unclosed streams
GHSA-44fp-w29j-9vj5 CVE-2025-47935 HIGH published about 1 year ago • updated about 2 months ago
### Impact Multer <2.0.0 is vulnerable to a resource exhaustion and memory leak issue due to improper stream handling. When the HTTP request strea...
Recent PRs
Bump multer and @types/multer

aswer18400/QXwap #218

1.4.5-lts.2 → 2.1.1 Major PR
Open 7 days ago 4 comments
aswer18400
Package Details
Name: multer
Ecosystem: npm
PURL Type: npm
Package URL: pkg:npm/multer
JSON API: View JSON
Security Advisories

7

Active advisories
HIGH 7
View All npm Advisories
Package Information
Description:

Middleware for handling `multipart/form-data`.

Repository: https://github.com/expressjs/multer
Homepage: https://github.com/expressjs/multer#readme
Latest Release: 2.0.1
12 months ago
Dependent Repos: 323,227
Dependent Packages: 4,202
Downloads: 29,118,183
Ranking: Top 0.0655% by dependent repos Top 0.0665% by downloads Top 0.0226% by dependent pkgs
PR Status
Open 3,565 (50.8%)
Merged 1,304 (18.6%)
Closed 1,645 (23.5%)
PR Types
Major 4,517 (64.4%)
Minor 443 (6.3%)
Patch 1,414 (20.2%)
Removal 8 (0.1%)