Packages

body-parser

2.4.0 · 22 Oct 2026MIT201.6M / weekRepositoryHomepagenpmAtom feed

Upgrading body-parser From 1.0.2 to 1.20.9

73 releases in betweenevery note read

Other targets from 1.0.2Latest2.4.0
  1. 1.0.2yours
  2. 42 releases
  3. 1.13.0breaking
  4. 27 releases
  5. 1.20.6security
  6. 1 release
  7. 1.20.9target
3
changes to make
3
advisories fixed
13
new
12
fixes

Before you upgrade

Tick each one off as you go
  • breaking1.13.0
  • deprecated1.4.0
  • deprecated1.4.0

Security

Fixes 3 advisories affecting 1.0.2

Release by release

  1. 1.20.9

    Security fix22 Oct 2026

  2. 1.20.8nothing new or fixed in the note

  3. 1.20.6

    Security fix9 Jul 20261 fix

  4. 1.20.5

    24 Apr 20261 fix
    • fixed

      Correct off-by-one error in parameterCount

  5. 1.20.4nothing new or fixed in the note

  6. 1.20.3

    9 Sep 20242 new · 1 fix
    • new

      Add depth option to customize the depth level in the parser

    • new

      Add OSSF Scorecard badge

    • fixed

      Pin to node@22.4.1

  7. 1.20.2

    22 Feb 20231 fix
    • fixed

      Fix strict json error message on Node.js 19+

  8. 1.20.1nothing new or fixed in the note

23 other lines we could not sort, mostly version bumps

  • Remove redundant depth check

    1.20.4

  • IMPORTANT: The default depth level for parsing URL-encoded data is now 32 (previously was Infinity). Documentation

    1.20.3

  • Provide static require analysis in urlencoded parser

    1.14.0

  • Change type default to application/json for JSON parser

    1.13.0

  • Change type default to application/x-www-form-urlencoded for urlencoded parser

    1.13.0

  • Provide static require analysis

    1.13.0

  • Use the http-errors module to generate errors

    1.13.0

  • Slight efficiency improvement when not debugging

    1.12.3

  • Accept a function for the type option

    1.12.0

  • Use content-type to parse Content-Type headers

    1.12.0

126 internal lines (docs, tests, tooling) left out.