body-parser

2.4.0 · 22 Oct 2026MIT201.6M / weekRepository Homepage npm Atom feed

Your version

1.13.0

15 Jun 2015Where it was published

1.20.9 is the newest release of 1.x.

In short

1 removed1 new2 faster4 changed6 internal

removed
Remove argument reassignment

Security

3 advisories affect 1.13.0; 1.20.9 fixes them

High
body-parser vulnerable to Denial of Service via trailing bytes after a compressed request bodyGHSA-27r3-jxmh-p828 · 23 Oct 2026
Fixed in 1.20.9
High
body-parser vulnerable to denial of service when url encoding is enabledGHSA-qwcr-r2fm-qrc7 · 10 Sep 2024
Fixed in 1.20.3
Low
body-parser vulnerable to denial of service when invalid limit value silently disables size enforcementGHSA-v422-hmwv-36x6 · 20 Jul 2026
Fixed in 1.20.6

Release note

Add statusCode property on Errors, in addition to status
Change type default to application/json for JSON parser
Change type default to application/x-www-form-urlencoded for urlencoded parser
Provide static require analysis
Use the http-errors module to generate errors
Enable strict mode
removed
Remove argument reassignment
Remove delete call