zwave-js / zwave-js-ui / 33758260884

13%

push

github

chore(deps): update dependency multer to v2.2.0 (#4813)

This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
| [multer](https://redirect.github.com/expressjs/multer) | [`2.0.2` →
`2.2.0`](https://renovatebot.com/diffs/npm/multer/2.0.2/2.2.0) |
![age](https://developer.mend.io/api/mc/badges/age/npm/multer/2.2.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/multer/2.0.2/2.2.0?slim=true)
|

---

### Multer vulnerable to Denial of Service via resource exhaustion
[CVE-2026-2359](https://nvd.nist.gov/vuln/detail/CVE-2026-2359) /
[GHSA-v52c-386h-88mc](https://redirect.github.com/advisories/GHSA-v52c-386h-88mc)

<details>
<summary>More information</summary>

#### Details
##### Impact

A vulnerability in Multer versions < 2.1.0 allows an attacker to trigger
a Denial of Service (DoS) by dropping connection during file upload,
potentially causing resource exhaustion.

##### Patches

Users should upgrade to `2.1.0`

##### Workarounds

None

#### Severity
- CVSS Score: 8.7 / 10 (High)
- Vector String:
`CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N`

#### References
-
[https://github.com/expressjs/multer/security/advisories/GHSA-v52c-386h-88mc](https://redirect.github.com/expressjs/multer/security/advisories/GHSA-v52c-386h-88mc)
-
[https://nvd.nist.gov/vuln/detail/CVE-2026-2359](https://nvd.nist.gov/vuln/detail/CVE-2026-2359)
-
[https://github.com/expressjs/multer/commit/<a class=hub.com/zwave-js/zwave-js-ui/commit/cccf0fe0e64150c4f42ccf6654165c0d66b9adab">cccf0fe0e](https://redirect.github.com/expressjs/multer/commit/cccf0fe0e64150c4f42ccf6654165c0d66b9adab)
-
[https://cna.openjsf.org/security-advisories.html](https://cna.openjsf.org/security-advisories.html)
-
[https://www.cve.org/CVERecord?id=CVE-2026-2359](https://www.cve.org/CVERecord?id=CVE-2026-2359)
-
[https://github.com/advisories/GHSA-v52c-386h-88mc](https://redi... (continued)

537 of 4564 branches covered (11.77%)

Branch coverage included in aggregate %.

997 of 7041 relevant lines covered (14.16%)

2.17 hits per line