body-parser
2.4.0 · 22 Oct 2026MIT201.6M / weekRepositoryHomepagenpmAtom feed
Your version
Security advisories
From OSV, open ones first. Each release line gets its own fix: an older major is fixed by a patch on that major, not by moving to the newest one.
| Line | Newest | Where it stands |
|---|---|---|
| 2.4.0 | Safe from 2.4.0 | |
| 1.20.9 | Safe from 1.20.9 |
- Highbody-parser vulnerable to Denial of Service via trailing bytes after a compressed request bodyGHSA-27r3-jxmh-p828 · 23 Oct 2026fixed in 2.4.0, 1.20.9
- Highbody-parser vulnerable to denial of service when url encoding is enabledGHSA-qwcr-r2fm-qrc7 · 10 Sep 2024fixed in 1.20.3
- Moderatebody-parser is vulnerable to denial of service when url encoding is usedGHSA-wqch-xfxh-vrr4 · 25 Nov 2025fixed in 2.2.1
- Lowbody-parser vulnerable to denial of service when invalid limit value silently disables size enforcementGHSA-v422-hmwv-36x6 · 20 Jul 2026fixed in 2.3.0, 1.20.6
Registry facts last checked 4 Nov 2026. Releases and advisories last read 4 Nov 2026.