body-parser
2.4.0 · 22 Oct 2026MIT201.6M / weekRepositoryHomepagenpmAtom feed
Upgrading body-parser From 1.19.2 to 1.20.0
1 release in betweenevery note read
- 0
- changes to make
- 0
- advisories fixed
- 0
- new
- 1
- fix
Security
3 advisories still affect 1.20.0
- body-parser vulnerable to Denial of Service via trailing bytes after a compressed request bodyhigh · GHSA-27r3-jxmh-p828
- body-parser vulnerable to denial of service when url encoding is enabledhigh · GHSA-qwcr-r2fm-qrc7
- body-parser vulnerable to denial of service when invalid limit value silently disables size enforcementlow · GHSA-v422-hmwv-36x6
Upgrading to 1.20.9 clears them.
Release by release
- fixed
Fix error message for json parse whitespace in
strict
- fixed