expressjs/body-parser Security Advisories | GitStock

high2026-10-23

body-parser vulnerable to Denial of Service via trailing bytes after a compressed request body

GHSA-27r3-jxmh-p828 · CVE-2026-111181

low2026-07-20

body-parser vulnerable to denial of service when invalid limit value silently disables size enforcement

GHSA-v422-hmwv-36x6 · CVE-2026-12590

medium2025-11-25

body-parser is vulnerable to denial of service when url encoding is used

GHSA-wqch-xfxh-vrr4 · CVE-2025-13466

high2024-09-10

body-parser vulnerable to denial of service when url encoding is enabled

GHSA-qwcr-r2fm-qrc7 · CVE-2024-45590