UnratedFix available
multer v2.3.0
Type: patchSources: Multer
multer v2.3.0 lists fixes for four CVEs.
- Products
- multer
- Affected versions
- Not specified
- Fixed versions
- v2.3.0
- CVEs
- CVE-2026-77037, CVE-2026-77063, CVE-2026-77078, CVE-2026-82333
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 28 Oct 2026, 08:02 UTC · Revision 1
Source evidence
multer v2.3.0 lists fixes for four CVEs.
Important Fix CVE-2026-77078 (GHSA-wc9g-mqfw-jrwm) Fix CVE-2026-77037 (GHSA-qfvm-cv95-jqjf) Fix CVE-2026-77063 (GHSA-qvfw-j98x-7q72) Fix CVE-2026-82333 (GHSA-535w-7cp7-47q4)
multer
Fixed versions: v2.3.0
Complete source record
{
"id": "88cdccee66f430968ed3c77e90ea05816ca2435cb32683879788f2fca3895c1b",
"url": "https://github.com/expressjs/multer/releases/tag/v2.3.0",
"method": "llm",
"payload": {
"kind": "patch",
"title": "multer v2.3.0",
"summary": "multer v2.3.0 lists fixes for four CVEs.",
"evidence": "Important Fix CVE-2026-77078 (GHSA-wc9g-mqfw-jrwm) Fix CVE-2026-77037 (GHSA-qfvm-cv95-jqjf) Fix CVE-2026-77063 (GHSA-qvfw-j98x-7q72) Fix CVE-2026-82333 (GHSA-535w-7cp7-47q4)",
"products": [
{
"name": {
"value": "multer",
"evidence": "Release notes from multer"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "v2.3.0",
"evidence": "v2.3.0"
}
],
"affected_versions": []
}
],
"severity": "unknown",
"fixed_cves": [],
"related_cves": [
{
"value": "CVE-2026-77078",
"evidence": "Important Fix CVE-2026-77078 (GHSA-wc9g-mqfw-jrwm)"
},
{
"value": "CVE-2026-77037",
"evidence": "Fix CVE-2026-77037 (GHSA-qfvm-cv95-jqjf)"
},
{
"value": "CVE-2026-77063",
"evidence": "Fix CVE-2026-77063 (GHSA-qvfw-j98x-7q72)"
},
{
"value": "CVE-2026-82333",
"evidence": "Fix CVE-2026-82333 (GHSA-535w-7cp7-47q4)"
}
],
"security_relevant": true,
"severity_evidence": null
},
"source_id": "github-expressjs-multer",
"document_id": 21054,
"published_at": "2026-08-28T19:10:22+00:00"
}