body-parser
2.4.0 · 22 Oct 2026MIT201.6M / weekRepositoryHomepagenpmAtom feed
Upgrading body-parser From 2.3.0 to 2.4.0
1 release in betweenevery note read
- 0
- changes to make
- 1
- advisory fixed
- 3
- new
- 1
- fix
Security
Fixes 1 advisory affecting 2.3.0
- body-parser vulnerable to Denial of Service via trailing bytes after a compressed request bodyhigh · GHSA-27r3-jxmh-p828
- 2.4.0
Security fix for CVE-2026-111181 (GHSA-27r3-jxmh-p828)
Release by release
- security
Security fix for CVE-2026-111181 (GHSA-27r3-jxmh-p828)
- new
json: Avoid first-char regex for direct JSON bodies
- new
Zstandard support
- new
Inline content stream setup
- fixed
Avoid mutating read options when reading body
- security
19 internal lines (docs, tests, tooling) left out.