Skip to content

[codex] Override multer advisory fix#8

Merged
nahremenkova1 merged 1 commit into
mainfrom
codex/multer-2-2-override
Jun 18, 2026
Merged

[codex] Override multer advisory fix#8
nahremenkova1 merged 1 commit into
mainfrom
codex/multer-2-2-override

Conversation

@nahremenkova1

Copy link
Copy Markdown
Collaborator

Summary

  • Add a multer@2.2.0 npm override for the NestJS platform-express dev/test dependency.
  • Refresh the lockfile so the resolved transitive dependency no longer lands on vulnerable multer@2.1.1.

Root Cause

@nestjs/platform-express@11.1.19 resolves multer@2.1.1, which npm audit flags for high-severity denial-of-service advisories. The SDK production dependency surface is clean; this affects the dev/test NestJS stack.

Validation

  • npm audit --audit-level=moderate
  • npm test
  • npm run typecheck
  • npm ls multer confirms multer@2.2.0 overridden

Co-Authored-By: Paperclip <noreply@paperclip.ing>
@nahremenkova1 nahremenkova1 marked this pull request as ready for review June 18, 2026 10:06
@nahremenkova1 nahremenkova1 merged commit a86887f into main Jun 18, 2026
5 checks passed
@nahremenkova1 nahremenkova1 deleted the codex/multer-2-2-override branch June 18, 2026 10:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant