body-parser

2.4.0 · 22 Oct 2026MIT201.6M / weekRepository Homepage npm Atom feed

Your version

2.0.1

10 Sep 2024Where it was published

2.4.0 is the newest release of 2.x.

In short

1 fixed1 internal

Security

2 advisories affect 2.0.1; 2.4.0 fixes them

High
body-parser vulnerable to Denial of Service via trailing bytes after a compressed request bodyGHSA-27r3-jxmh-p828 · 23 Oct 2026
Fixed in 2.4.0
Low
body-parser vulnerable to denial of service when invalid limit value silently disables size enforcementGHSA-v422-hmwv-36x6 · 20 Jul 2026
Fixed in 2.3.0

Release note

What's Changed

Fix defaulting to extended url parsing