body-parser
2.4.0 · 22 Oct 2026MIT201.6M / weekRepositoryHomepagenpmAtom feed
Upgrading body-parser From 2.2.0 to 2.2.1
1 release in betweenevery note read
Other targets from 2.2.0Newest 2.x, Clears its 3 advisories, Latest2.4.0
- 0
- changes to make
- 1
- advisory fixed
- 1
- new
- 0
- fixes
Security
2 advisories still affect 2.2.1
- body-parser vulnerable to Denial of Service via trailing bytes after a compressed request bodyhigh · GHSA-27r3-jxmh-p828
- body-parser vulnerable to denial of service when invalid limit value silently disables size enforcementlow · GHSA-v422-hmwv-36x6
Upgrading to 2.4.0 clears them.
Fixes 1 advisory affecting 2.2.0
- body-parser is vulnerable to denial of service when url encoding is usedmoderate · GHSA-wqch-xfxh-vrr4
- 2.2.1
Security fix for CVE-2025-13466 (GHSA-wqch-xfxh-vrr4)
Release by release
- security
Security fix for CVE-2025-13466 (GHSA-wqch-xfxh-vrr4)
- new
Move read options outside parser middlewares
- security
1 other line we could not sort, mostly version bumps
- 2.2.1
Remove history.md from being packaged on publish
41 internal lines (docs, tests, tooling) left out.