UnratedFix available
multer v2.1.0
Type: patchSources: Multer
multer v2.1.0 fixes CVE-2026-2359 and CVE-2026-3304.
- Products
- multer
- Affected versions
- Not specified
- Fixed versions
- v2.1.0
- CVEs
- CVE-2026-2359, CVE-2026-3304
- Confirmed fixed CVEs
- CVE-2026-2359, CVE-2026-3304
- Updated in this feed
- 28 Oct 2026, 08:42 UTC · Revision 1
Source evidence
multer v2.1.0 fixes CVE-2026-2359 and CVE-2026-3304.
Release notes from multer v2.1.0 Important Fix CVE-2026-2359 (GHSA-v52c-386h-88mc) Fix CVE-2026-3304 (GHSA-xf7r-hgr6-v32p)
multer
Fixed versions: v2.1.0
Complete source record
{
"id": "491e1e2e2224e0dfbb8eb5f8b4e5d5600569bcad1fac779abd60d0483e2fab2b",
"url": "https://github.com/expressjs/multer/releases/tag/v2.1.0",
"method": "llm",
"payload": {
"kind": "patch",
"title": "multer v2.1.0",
"summary": "multer v2.1.0 fixes CVE-2026-2359 and CVE-2026-3304.",
"evidence": "Release notes from multer\nv2.1.0\n\nImportant Fix CVE-2026-2359 (GHSA-v52c-386h-88mc) Fix CVE-2026-3304 (GHSA-xf7r-hgr6-v32p)",
"products": [
{
"name": {
"value": "multer",
"evidence": "Release notes from multer"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "v2.1.0",
"evidence": "v2.1.0"
}
],
"affected_versions": []
}
],
"severity": "unknown",
"fixed_cves": [
{
"cve": "CVE-2026-2359",
"product": "multer",
"evidence": "Release notes from multer\nv2.1.0\n\nImportant Fix CVE-2026-2359"
},
{
"cve": "CVE-2026-3304",
"product": "multer",
"evidence": "Release notes from multer\nv2.1.0\n\nImportant Fix CVE-2026-2359 (GHSA-v52c-386h-88mc) Fix CVE-2026-3304"
}
],
"related_cves": [
{
"value": "CVE-2026-2359",
"evidence": "Important Fix CVE-2026-2359"
},
{
"value": "CVE-2026-3304",
"evidence": "Fix CVE-2026-3304"
}
],
"security_relevant": true,
"severity_evidence": null
},
"source_id": "github-expressjs-multer",
"document_id": 21058,
"published_at": "2026-02-27T15:33:15+00:00"
}