v11.2.6

andimarafioti/faster-qwen3-ttsv11.2.6Sep 23, 2026by kamilmysliwiec

Upgrading?

AI Summary

Security update for the NestJS platform-express module, addressing a multer vulnerability and improving error handling.

Key Highlights

  • Updated multer to v2.4.0 to fix CVE-2026-88932
  • Fixed multer error mapping to return 400 for unexpected field names instead of 500

Full Release Notes

## What's changed

- `@nestjs/platform-express`
  - [fix(deps): update dependency multer to v2.4.0 [security]](https://github.com/nestjs/nest/commit/fb8ecdbef124f102f96de7f62db70b68296e6ae0) — fixes CVE-2026-88932 ([GHSA-3pph-fpjx-jg34](https://github.com/advisories/GHSA-3pph-fpjx-jg34))
  - [fix(express): map multer errors by code instead of message](https://github.com/nestjs/nest/commit/58c3634b25b027d72fc25ec66d92311cb3d4b249) — backport of #17769; a file sent under an unexpected field name now returns 400 again instead of 500 with multer 2.4.0

**Full Changelog**: https://github.com/nestjs/nest/compare/v11.2.5...v11.2.6

Related Repositories