UpHeron
All vulnerabilities

npm

CVE-2026-111181

body-parser vulnerable to Denial of Service via trailing bytes after a compressed request body

Severity
High 7.5
Published
23 Oct 2026
Last changed
23 Oct 2026
Added to UpHeron
24 Oct 2026
Fixed in
1.20.9, 2.4.0
Also known as
GHSA-27r3-jxmh-p828
Sources
OSV.dev and GitHub

Affected software

SoftwareAffected versions
body-parsernpm · osv:npm:body-parser
  • Every version before 1.20.9
  • From 2.0.0 before 2.4.0

References