---
title: "compression 1.8.2"
description: "Latest published version of compression is 1.8.2, licensed MIT. Current as of our last registry check."
url: https://inlinr.com/packages/compression
lang: en
---

[Packages](https://inlinr.com/packages)

# compression

1.8.2 · 11 Sep 2026 MIT 61.4M / week [Repository](https://github.com/expressjs/compression) [Homepage](https://github.com/expressjs/compression#readme) [npm](https://www.npmjs.com/package/compression) [Atom feed](https://inlinr.com/packages/feed/compression)

Your version 

## Where each line stands

[Plan an upgrade](https://inlinr.com/packages/compression/upgrade)

LineNewestSecurity

- 1.x 1.8.2 Safe from 1.8.2 Latest line

## Latest releases

[All 40 releases](https://inlinr.com/packages/compression/releases)

1. ### [1.8.2](https://inlinr.com/packages/compression/releases/1.8.2 "Open this release") [](https://github.com/expressjs/compression/releases/tag/v1.8.2 "Read this release where it was published")  
11 Sep 2026

  - security  
  Fix [CVE-2026-87776](https://www.cve.org/CVERecord?id=CVE-2026-87776 "https://www.cve.org/CVERecord?id=CVE-2026-87776") ([GHSA-vc2v-76pw-4v95](https://github.com/expressjs/compression/security/advisories/GHSA-vc2v-76pw-4v95 "https://github.com/expressjs/compression/security/advisories/GHSA-vc2v-76pw-4v95"))
  - Match Cache-Control no-transform directive case-insensitively
2. ### [1.8.1](https://inlinr.com/packages/compression/releases/1.8.1 "Open this release")  
17 Jul 2025
3. ### [1.8.0](https://inlinr.com/packages/compression/releases/1.8.0 "Open this release")  
10 Feb 2025

Notes older than 90 days are read on the [Releases tab](https://inlinr.com/packages/compression/releases).

Dependency tracking · free for 3 projects

## Know when your own dependencies move

compression had 1 security advisory in the last 12 months. inlinr emails you the day one touches a project of yours, with the version that fixes it.

- Advisories reach you  
An email when a critical or high advisory affects a project, before the next install.
- Upgrades checked first  
Peer ranges, Node, ESM-only and types changes read before you bump.
- Only what matters  
Majors and breaking notes stay; patches and sibling bumps fold into one line.

[How dependency tracking works](https://inlinr.com/dependencies)

## Security

[Details](https://inlinr.com/packages/compression/security)

- [compression vulnerable to Denial of Service via memory leak on premature response close](https://inlinr.com/advisories/GHSA-vc2v-76pw-4v95) High · fixed in 1.8.2

## Health

[Details](https://inlinr.com/packages/compression/security#signals)

- **Provenance**:
- **Publisher**:
- **Maintainers**:
- **Scorecard**:
- **Size**:

## Weekly downloads

Registry facts last checked 4 Nov 2026\. Releases and advisories last read 4 Nov 2026.