---
title: "compression security advisories"
description: "1 known security advisory for compression, with the versions they affect and the version that fixes each."
url: https://inlinr.com/packages/compression/security
lang: en
---

[Packages](https://inlinr.com/packages)

# compression

1.8.2 · 11 Sep 2026 MIT 61.4M / week [Repository](https://github.com/expressjs/compression) [Homepage](https://github.com/expressjs/compression#readme) [npm](https://www.npmjs.com/package/compression) [Atom feed](https://inlinr.com/packages/feed/compression)

Your version 

## Security advisories

From OSV, open ones first. Each release line gets its own fix: an older major is fixed by a patch on that major, not by moving to the newest one.

| Line | Newest | Where it stands |
| ---- | ------ | --------------- |
|      | 1.8.2  | Safe from 1.8.2 |

- High  
[compression vulnerable to Denial of Service via memory leak on premature response close](https://inlinr.com/advisories/GHSA-vc2v-76pw-4v95)GHSA-vc2v-76pw-4v95 · 5 Oct 2026  
fixed in 1.8.2

### Quality and security signals

What [npm](https://www.npmjs.com/package/compression) and [deps.dev](https://deps.dev/npm/compression) say about the latest release. Signals, not a verdict.

Reading npm and deps.dev…

Registry facts last checked 4 Nov 2026\. Releases and advisories last read 4 Nov 2026.