body-parser
2.4.0 · 22 Oct 2026MIT201.6M / weekRepositoryHomepagenpmAtom feed
Upgrading body-parser From 1.14.0 to 1.14.1
1 release in betweenevery note read
- 0
- changes to make
- 0
- advisories fixed
- 0
- new
- 1
- fix
Security
3 advisories still affect 1.14.1
- body-parser vulnerable to Denial of Service via trailing bytes after a compressed request bodyhigh · GHSA-27r3-jxmh-p828
- body-parser vulnerable to denial of service when url encoding is enabledhigh · GHSA-qwcr-r2fm-qrc7
- body-parser vulnerable to denial of service when invalid limit value silently disables size enforcementlow · GHSA-v422-hmwv-36x6
Upgrading to 1.20.9 clears them.
Release by release
- fixed
Fix issue where invalid charset results in 400 when
verifyused
- fixed
3 internal lines (docs, tests, tooling) left out.