{"vulnerability": "cve-2026-88932", "sightings": [{"uuid": "770bd973-12f1-4815-a8f8-2ea42b22a4ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88932", "type": "seen", "source": "https://bsky.app/profile/ulisesgascon.com/post/3mvhofzrsek2d", "content": "multer@2.4.0 is out \ud83c\udf89\n\n\ud83d\udd12 Security fix (CVE-2026-88932)\n\u2601\ufe0f  Google Cloud Functions / Firebase supported via the new streamHandler option\n\ud83d\udccf Per-request limits: pass a function\n\ud83e\uddfe err.filename tells you which file broke the size limit\n\u26a1 Misconfigured limits now fail at startup\n\ngithub.com/expressjs/mu...", "creation_timestamp": "2026-09-14T08:19:35.560683Z"}, {"uuid": "7f4d988e-f62c-4828-8b9a-07c8a139ced5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88932", "type": "seen", "source": "https://bsky.app/profile/ulisesgascon.com/post/3mvhq6dc6g22d", "content": "\ud83d\udea8 Medium-severity security fix in multer@2.4.0 just released!\n\nPatches CVE-2026-88932: multer vulnerable to Denial of Service via orphaned disk writes on aborted uploads\n\ngithub.com/expressjs/mu...", "creation_timestamp": "2026-09-14T08:51:05.518794Z"}, {"uuid": "0ab0b137-a2b8-45d3-a1f3-059daf6db7e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88932", "type": "seen", "source": "https://bsky.app/profile/whatsnew.fyi/post/3mw6shng6472n", "content": "NestJS v11.2.6\n\nUpdate dependency multer to v2.4.0 to fix CVE-2026-88932", "creation_timestamp": "2026-09-23T13:03:16.679815Z"}]}