body-parser
2.4.0 · 22 Oct 2026MIT201.6M / weekRepositoryHomepagenpmAtom feed
Upgrading body-parser From 1.20.3 to 1.20.9
5 releases in betweenevery note read
Other targets from 1.20.3Latest2.4.0
- 0
- changes to make
- 2
- advisories fixed
- 0
- new
- 2
- fixes
Security
Fixes 2 advisories affecting 1.20.3
- body-parser vulnerable to Denial of Service via trailing bytes after a compressed request bodyhigh · GHSA-27r3-jxmh-p828
- body-parser vulnerable to denial of service when invalid limit value silently disables size enforcementlow · GHSA-v422-hmwv-36x6
- 1.20.9
Security fix for CVE-2026-111181 (GHSA-27r3-jxmh-p828)
- 1.20.6
Security fix for CVE-2026-12590 (GHSA-v422-hmwv-36x6)
Release by release
- security
Security fix for CVE-2026-111181 (GHSA-27r3-jxmh-p828)
- security
1.20.8nothing new or fixed in the note
- security
Security fix for CVE-2026-12590 (GHSA-v422-hmwv-36x6)
- fixed
Improve limit option validation
- security
- fixed
Correct off-by-one error in parameterCount
- fixed
1.20.4nothing new or fixed in the note
1 other line we could not sort, mostly version bumps
- 1.20.4
Remove redundant depth check
12 internal lines (docs, tests, tooling) left out.