body-parser
2.4.0 · 22 Oct 2026MIT201.6M / weekRepositoryHomepagenpmAtom feed
Your version
2.4.0 is the newest release of 2.x.
In short
1 security1 faster1 changed41 internal
Security
Fixes 1 advisory that affected 2.2.0
- Moderatebody-parser is vulnerable to denial of service when url encoding is usedGHSA-wqch-xfxh-vrr4 · 25 Nov 2025Fixed in 2.2.1
2 advisories affect 2.2.1; 2.4.0 fixes them
- Highbody-parser vulnerable to Denial of Service via trailing bytes after a compressed request bodyGHSA-27r3-jxmh-p828 · 23 Oct 2026Fixed in 2.4.0
- Lowbody-parser vulnerable to denial of service when invalid limit value silently disables size enforcementGHSA-v422-hmwv-36x6 · 20 Jul 2026Fixed in 2.3.0
Release note
Important: Security
- security
Security fix for CVE-2025-13466 (GHSA-wqch-xfxh-vrr4)
What's Changed
Move read options outside parser middlewares
Remove history.md from being packaged on publish