body-parser
2.4.0 · 22 Oct 2026MIT201.6M / weekRepositoryHomepagenpmAtom feed
Upgrading body-parser From 1.20.9 to 2.0.0
1 release in betweenevery note read
Other targets from 1.20.9Latest2.4.0
- 2
- changes to make
- 0
- advisories fixed
- 4
- new
- 1
- fix
Before you upgrade
Tick each one off as you go- breaking2.0.0
- breaking2.0.0
Security
2 advisories still affect 2.0.0
- body-parser vulnerable to Denial of Service via trailing bytes after a compressed request bodyhigh · GHSA-27r3-jxmh-p828
- body-parser vulnerable to denial of service when invalid limit value silently disables size enforcementlow · GHSA-v422-hmwv-36x6
Upgrading to 2.4.0 clears them.
Release by release
- breaking
Node.js 18 is the minimum supported version
- breaking
Drop support for less than LTS node versions in v2
- new
Add brotli support #406
- new
urlencoded: Support iso-8859-1, utf8 sentinel, and numeric entities
- new
Added support for brotli ('br') content-encoding
- new
Add OSSF Scorecard badge
- fixed
Pin to node@22.4.1
- breaking
1 other line we could not sort, mostly version bumps
- 2.0.0
Also use the qs module for the simple parser
6 internal lines (docs, tests, tooling) left out.