body-parser
2.4.0 · 22 Oct 2026MIT201.6M / weekRepositoryHomepagenpmAtom feed
Upgrading body-parser From 2.0.2 to 2.1.0
1 release in betweenevery note read
Other targets from 2.0.2Newest 2.x, Clears its 2 advisories, Latest2.4.0
- 2
- changes to make
- 0
- advisories fixed
- 2
- new
- 2
- fixes
Before you upgrade
Tick each one off as you go- breaking2.1.0
- breaking2.1.0
Security
2 advisories still affect 2.1.0
- body-parser vulnerable to Denial of Service via trailing bytes after a compressed request bodyhigh · GHSA-27r3-jxmh-p828
- body-parser vulnerable to denial of service when invalid limit value silently disables size enforcementlow · GHSA-v422-hmwv-36x6
Upgrading to 2.4.0 clears them.
Release by release
- breaking
Update package.json engines field to reflect minimum supported node version
- breaking
Remove unpipe package and use native unpipe method
- new
Use the node require cache instead of custom caching
- new
Add caret for body-parser dependencies
- fixed
Remove brotli support check
- fixed
Remove obsolete dependency
destroy
- breaking
5 other lines we could not sort, mostly version bumps
- 2.1.0
Remove unused devDependency
methods - 2.1.0
Remove devDependency
safe-buffer - 2.1.0
cleanup: Remove obsolete test env file
- 2.1.0
Refactor decompression stream creation to remove code duplication
- 2.1.0
Release v2.1.0
7 internal lines (docs, tests, tooling) left out.