From e21d72f4097dcc4959a51394b65b16fd845d685c Mon Sep 17 00:00:00 2001 From: Ulises Gascon Date: Wed, 4 Mar 2026 16:57:44 +0100 Subject: [PATCH 1/2] 2.1.1 --- CHANGELOG.md | 5 +++++ package.json | 2 +- 2 files changed, 6 insertions(+), 1 deletion(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 0f0c0913..24fa5628 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -3,6 +3,11 @@ All notable changes to this project will be documented in this file. This project adheres to [Semantic Versioning](http://semver.org/). +## 2.1.1 + +- Fix [CVE-2026-3520](https://www.cve.org/CVERecord?id=CVE-2026-3520) ([GHSA-5528-5vmv-3xc2](https://github.com/expressjs/multer/security/advisories/GHSA-5528-5vmv-3xc2)) + + ## 2.1.0 - Add `defParamCharset` option for UTF-8 filename support ([#1210](https://github.com/expressjs/multer/pull/1210)) diff --git a/package.json b/package.json index c89ece30..db895112 100644 --- a/package.json +++ b/package.json @@ -1,7 +1,7 @@ { "name": "multer", "description": "Middleware for handling `multipart/form-data`.", - "version": "2.1.0", + "version": "2.1.1", "contributors": [ "Hage Yaapa (http://www.hacksparrow.com)", "Jaret Pfluger ", From 5f837af97c3c12185c96e5f020aa914ec7cde00a Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Ulises=20Gasc=C3=B3n?= Date: Wed, 4 Mar 2026 17:21:29 +0100 Subject: [PATCH 2/2] Update CHANGELOG.md Co-authored-by: Chris de Almeida --- CHANGELOG.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 24fa5628..a0a3b861 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -6,7 +6,7 @@ This project adheres to [Semantic Versioning](http://semver.org/). ## 2.1.1 - Fix [CVE-2026-3520](https://www.cve.org/CVERecord?id=CVE-2026-3520) ([GHSA-5528-5vmv-3xc2](https://github.com/expressjs/multer/security/advisories/GHSA-5528-5vmv-3xc2)) - +- fix error/abort handling ## 2.1.0