Skip to content

fix(deps): upgrade multer to resolve 3 security vulnerabilities #39307

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
merged 1 commit into from
Jun 6, 2025
Merged

fix(deps): upgrade multer to resolve 3 security vulnerabilities #39307

merged 1 commit into from
Jun 6, 2025

Conversation

serhalp
Copy link
Member

@serhalp serhalp commented Jun 6, 2025

Description

Upgrade multer to resolve new security vulnerabilities:

It's a major but it just drops support for node 10: https://github.com/expressjs/multer/releases/tag/v2.0.0.

Documentation

N/A

Tests

N/A

Related Issues

Fixes #39304

@gatsbot gatsbot bot added the status: triage needed Issue or pull request that need to be triaged and assigned to a reviewer label Jun 6, 2025
@serhalp serhalp force-pushed the fix/upgrade-multer branch from 3a17512 to 05f8926 Compare June 6, 2025 00:28
@pieh pieh removed the status: triage needed Issue or pull request that need to be triaged and assigned to a reviewer label Jun 6, 2025
@github-project-automation github-project-automation bot moved this to To cherry-pick in V5 Release hotfixes Jun 6, 2025
@pieh pieh merged commit 9708d4d into master Jun 6, 2025
38 checks passed
@pieh pieh deleted the fix/upgrade-multer branch June 6, 2025 14:18
pieh pushed a commit that referenced this pull request Jun 6, 2025
@serhalp @pieh
fix(deps): upgrade multer to resolve 3 security vulnerabilities (#39307)
1a1c701 
fix(deps): upgrade multer

(cherry picked from commit 9708d4d)
@gatsbybot gatsbybot mentioned this pull request Jun 6, 2025
Merged
serhalp added a commit that referenced this pull request Jun 6, 2025
@gatsbybot @serhalp
fix(deps): upgrade multer to resolve 3 security vulnerabilities (#39307…
e0cdefb 
…) (#39308)

fix(deps): upgrade multer

(cherry picked from commit 9708d4d)

Co-authored-by: Philippe Serhal <philippe.serhal@netlify.com>
@sourcery-ai sourcery-ai bot mentioned this pull request Jun 16, 2025
Merged
@pieh pieh moved this from To cherry-pick to Published in V5 Release hotfixes Jun 20, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@pieh pieh pieh approved these changes

Assignees
No one assigned
Labels
None yet
Projects
V5 Release hotfixes
Status: Published
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

gatsby@5.14.3 includes multer as a direct dependency
2 participants
@serhalp @pieh