body-parser
2.4.0 · 22 Oct 2026MIT201.6M / weekRepositoryHomepagenpmAtom feed
Upgrading body-parser From 2.1.0 to 2.4.0
5 releases in betweenevery note read
- 0
- changes to make
- 2
- advisories fixed
- 6
- new
- 3
- fixes
Security
Fixes 2 advisories affecting 2.1.0
- body-parser vulnerable to Denial of Service via trailing bytes after a compressed request bodyhigh · GHSA-27r3-jxmh-p828
- body-parser vulnerable to denial of service when invalid limit value silently disables size enforcementlow · GHSA-v422-hmwv-36x6
- 2.4.0
Security fix for CVE-2026-111181 (GHSA-27r3-jxmh-p828)
- 2.3.0
Security fix for CVE-2026-12590 (GHSA-v422-hmwv-36x6)
- 2.2.1
Security fix for CVE-2025-13466 (GHSA-wqch-xfxh-vrr4)
Release by release
- security
Security fix for CVE-2026-111181 (GHSA-27r3-jxmh-p828)
- new
json: Avoid first-char regex for direct JSON bodies
- new
Zstandard support
- new
Inline content stream setup
- fixed
Avoid mutating read options when reading body
- security
- security
Security fix for CVE-2026-12590 (GHSA-v422-hmwv-36x6)
- new
urlencoded: Move empty-body guard to avoid extra function closure
- new
Eliminate conditional check in json strict mode hot path
- fixed
Improve limit option validation
- security
2.2.2nothing new or fixed in the note
- security
Security fix for CVE-2025-13466 (GHSA-wqch-xfxh-vrr4)
- new
Move read options outside parser middlewares
- security
- fixed
Remove skip of test
- fixed
7 other lines we could not sort, mostly version bumps
- 2.3.0
Improve ESM compatibility
- 2.3.0
Upgrade "content-type"
- 2.3.0
Update outdated reference to MDN docs
- 2.2.1
Remove history.md from being packaged on publish
- 2.2.0
dep: Upgrade iconv-lite to ^0.6.3
- 2.2.0
Refactor parameterCount to optimize performance
- 2.2.0
Release 2.2.0
100 internal lines (docs, tests, tooling) left out.