Aikido Intel
Secure My Code
Package Health

multer

Middleware for handling `multipart/form-data`.

Latest 2.1.1NPMNPM

83%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

63

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

100

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

100

Attestations
Attestations
Measures the presence and validity of package attestations and signatures

50

Are you affected? Scan for Free

Vulnerabilities

TitleVersionsSeverity
CVE-2026-3520
multer is vulnerable to Uncontrolled Recursion in versions 0.0.0 - 2.1.1.
0.0.0 - 2.1.1
High
CVE-2026-2359
multer is vulnerable to Missing Release of Resource after Effective Lifetime in versions 0.0.0 - 2.1.0.
0.0.0 - 2.1.0
High
CVE-2026-3304
multer is vulnerable to Incomplete Cleanup in versions 0.0.0 - 2.1.0.
0.0.0 - 2.1.0
High
CVE-2025-7338
multer is vulnerable to Uncaught Exception in versions 1.4.4-lts.1 - 2.0.2.
1.4.4-lts.1 - 2.0.2
High
AIKIDO-2025-10436
multer is vulnerable to Uncaught Exception in versions 1.4.4-lts.1 - 2.0.0.
1.4.4-lts.1 - 2.0.0
High

Package versions

Maintainers

ctcpip
ulisesgascon
linusu
hacksparrow
jpfluger

Direct Dependencies

DependencyLast ReleaseScore
busboy
Version ^1.6.0
—
—
type-is
Version ^1.6.18
—
—
append-field
Version ^1.0.0
—
—
concat-stream
Version ^2.0.0
—
—

Weekly Downloads

Info

Last Published
2 months ago
Created
12 years ago
Unpacked Size
0.1 MB

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Scan for Free
Book a Demo

Free. No credit card required.

Aikido Platform
Subscribe
Stay up to date with all updates
LinkedIn YouTube X
© 2026 Aikido Security BV | BE0792914919
Ghent, Belgium | San Francisco, US
SOC 2SOC 2Compliant
ISO 27001ISO 27001Compliant
Get Security Done