Skip to content
OpenAdvisories

Package · Debian

node-body-parser

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2026-111181

    body-parser vulnerable to Denial of Service via trailing bytes after a compressed request body

    body-parser is body parsing middleware for Node.js and Express. In versions before 1.20.9 and in versions from 2.0.0 before 2.4.0, a single request can crash any application using body-parser with default options. When a request carries a Content-Encoding suc…

    body-parser body-parser node-body-parser body-parser Debian Ubuntu npm
  • High 7.5
    CVE-2024-45590 Public exploit

    body-parser vulnerable to denial of service when url encoding is enabled

    body-parser is Node.js body parsing middleware. body-parser <1.20.3 is vulnerable to denial of service when url encoding is enabled. A malicious actor using a specially crafted payload could flood the server with a large number of requests, resulting in denia…

    expressjs body-parser body-parser node-body-parser Debian Ubuntu npm