v11.2.6

AudarAI/Audar-ASR-V1v11.2.6Sep 23, 2026by kamilmysliwiec

Upgrading?

AI Summary

Updates the NestJS platform-express dependency to v2.4.0 to address a security vulnerability (CVE-2026-88932) and improves error handling for unexpected file upload field names.

Key Highlights

  • Security update: multer dependency updated to v2.4.0 to fix CVE-2026-88932
  • Bug fix: Error mapping changed from message-based to code-based
  • Behavior change: Unexpected file fields now return 400 instead of 500

Full Release Notes

## What's changed

- `@nestjs/platform-express`
  - [fix(deps): update dependency multer to v2.4.0 [security]](https://github.com/nestjs/nest/commit/fb8ecdbef124f102f96de7f62db70b68296e6ae0) — fixes CVE-2026-88932 ([GHSA-3pph-fpjx-jg34](https://github.com/advisories/GHSA-3pph-fpjx-jg34))
  - [fix(express): map multer errors by code instead of message](https://github.com/nestjs/nest/commit/58c3634b25b027d72fc25ec66d92311cb3d4b249) — backport of #17769; a file sent under an unexpected field name now returns 400 again instead of 500 with multer 2.4.0

**Full Changelog**: https://github.com/nestjs/nest/compare/v11.2.5...v11.2.6

Related Repositories