body-parser
2.4.0 · 22 Oct 2026MIT201.6M / weekRepositoryHomepagenpmAtom feed
Your version
In short
1 security1 new2 faster1 fixed19 internal
Security
Fixes 1 advisory that affected 2.3.0
- Highbody-parser vulnerable to Denial of Service via trailing bytes after a compressed request bodyGHSA-27r3-jxmh-p828 · 23 Oct 2026Fixed in 2.4.0
Release note
Important: Security
- security
Security fix for CVE-2026-111181 (GHSA-27r3-jxmh-p828)
What's Changed
Avoid mutating read options when reading body
json: Avoid first-char regex for direct JSON bodies
Zstandard support
Inline content stream setup