Error while installing multer packages using npm

Question

I am getting the following error while installing the multer package using npm.

dicer  *
Severity: high
Crash in HeaderParser in dicer - https://github.com/advisories/GHSA-wm7h-9275-46v2
No fix available
node_modules/dicer
  busboy  <=0.3.1
  Depends on vulnerable versions of dicer
  node_modules/busboy
    multer  <=2.0.0-rc.3
    Depends on vulnerable versions of busboy
    node_modules/multer
3 high severity vulnerabilities
Some issues need review, and may require choosing
a different dependency.

Answer 1

you can update multer to 1.4.5 as the latest version with npm i multer@latest that uses

[email protected]

without any vulnerabilities.

Answer 2

This is due to vulnerability in dicer dependency. Multer will still work, right now no fix is available. Maybe it will be resolved in next update. Check this GitHub reviewed vulnerability