body-parser
2.4.0 · 22 Oct 2026MIT201.6M / weekRepositoryHomepagenpmAtom feed
Upgrading body-parser From 1.20.2 to 1.20.3
1 release in betweenevery note read
- 0
- changes to make
- 1
- advisory fixed
- 2
- new
- 1
- fix
Security
2 advisories still affect 1.20.3
- body-parser vulnerable to Denial of Service via trailing bytes after a compressed request bodyhigh · GHSA-27r3-jxmh-p828
- body-parser vulnerable to denial of service when invalid limit value silently disables size enforcementlow · GHSA-v422-hmwv-36x6
Upgrading to 1.20.9 clears them.
Fixes 1 advisory affecting 1.20.2
- body-parser vulnerable to denial of service when url encoding is enabledhigh · GHSA-qwcr-r2fm-qrc7
Release by release
- new
Add
depthoption to customize the depth level in the parser - new
Add OSSF Scorecard badge
- fixed
Pin to node@22.4.1
- new
1 other line we could not sort, mostly version bumps
- 1.20.3
IMPORTANT: The default
depthlevel for parsing URL-encoded data is now32(previously wasInfinity). Documentation
6 internal lines (docs, tests, tooling) left out.