body-parser
2.4.0 · 22 Oct 2026MIT201.6M / weekRepositoryHomepagenpmAtom feed
Upgrading body-parser From 2.2.2 to 2.3.0
1 release in betweenevery note read
Other targets from 2.2.2Newest 2.x, Clears its 2 advisories, Latest2.4.0
- 0
- changes to make
- 1
- advisory fixed
- 2
- new
- 1
- fix
Security
1 advisory still affects 2.3.0
- body-parser vulnerable to Denial of Service via trailing bytes after a compressed request bodyhigh · GHSA-27r3-jxmh-p828
Upgrading to 2.4.0 clears it.
Fixes 1 advisory affecting 2.2.2
- 2.3.0
Security fix for CVE-2026-12590 (GHSA-v422-hmwv-36x6)
Release by release
- security
Security fix for CVE-2026-12590 (GHSA-v422-hmwv-36x6)
- new
urlencoded: Move empty-body guard to avoid extra function closure
- new
Eliminate conditional check in json strict mode hot path
- fixed
Improve limit option validation
- security
3 other lines we could not sort, mostly version bumps
- 2.3.0
Improve ESM compatibility
- 2.3.0
Upgrade "content-type"
- 2.3.0
Update outdated reference to MDN docs
25 internal lines (docs, tests, tooling) left out.