2.1.1 (#1380)

UlisesGascon · ctcpip · web-flow · commit 368c8a10cca1 · 2026-03-04T17:30:15.000+01:00
Co-authored-by: Chris de Almeida &lt;ctcpip@users.noreply.github.com&gt;
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -3,6 +3,11 @@
 All notable changes to this project will be documented in this file.
 This project adheres to [Semantic Versioning](http://semver.org/).
 
+## 2.1.1
+
+- Fix [CVE-2026-3520](https://www.cve.org/CVERecord?id=CVE-2026-3520) ([GHSA-5528-5vmv-3xc2](https://github.com/expressjs/multer/security/advisories/GHSA-5528-5vmv-3xc2))
+- fix error/abort handling
+
 ## 2.1.0
 
 - Add `defParamCharset` option for UTF-8 filename support ([#1210](https://github.com/expressjs/multer/pull/1210))
diff --git a/package.json b/package.json
@@ -1,7 +1,7 @@
 {
   "name": "multer",
   "description": "Middleware for handling `multipart/form-data`.",
-  "version": "2.1.0",
+  "version": "2.1.1",
   "contributors": [
     "Hage Yaapa <captain@hacksparrow.com> (http://www.hacksparrow.com)",
     "Jaret Pfluger <https://github.com/jpfluger>",

Original file line number	Diff line number	Diff line change
`@@ -1,7 +1,7 @@`
`1`	`1`	`{`
`2`	`2`	`"name": "multer",`
`3`	`3`	"description": "Middleware for handling `multipart/form-data`.",
`4`		`- "version": "2.1.0",`
	`4`	`+ "version": "2.1.1",`
`5`	`5`	`"contributors": [`
`6`	`6`	`"Hage Yaapa <captain@hacksparrow.com> (http://www.hacksparrow.com)",`
`7`	`7`	`"Jaret Pfluger <https://github.com/jpfluger>",`