Skip to content

chore(deps): update dependency body-parser to v1.20.6 (main) - #102

Open
mend-for-github-com[bot] wants to merge 1 commit into
mainfrom
whitesource-remediate/main-body-parser-1.20.x-lockfile
Open

chore(deps): update dependency body-parser to v1.20.6 (main)#102
mend-for-github-com[bot] wants to merge 1 commit into
mainfrom
whitesource-remediate/main-body-parser-1.20.x-lockfile

Conversation

@mend-for-github-com

@mend-for-github-com mend-for-github-com Bot commented Mar 23, 2026

Copy link
Copy Markdown

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
body-parser 1.20.11.20.6 age adoption passing confidence

By merging this PR, the issue #64 will be automatically resolved and closed:

Severity CVSS Score Vulnerability Reachability
High High 7.5 CVE-2024-45590

Reachable

Low Low 3.7 CVE-2026-12590

Release Notes

expressjs/body-parser (body-parser)

v1.20.6

Compare Source

===================

  • Security fix for GHSA-v422-hmwv-36x6
  • fix: improve limit option validation (#​698)
    • Invalid limit values (e.g. unparseable strings or NaN) now throw instead of being silently ignored, which previously disabled size limit enforcement
    • null and undefined fall back to the default 100kb limit

v1.20.5

Compare Source

===================

  • refactor(json): simplify strict mode error string construction
  • fix: extended urlencoded parsing of arrays with >100 elements (#​716)
  • deps: qs@~6.15.1

v1.20.4

Compare Source

===================

  • deps: qs@~6.14.0
  • deps: use tilde notation for dependencies
  • deps: http-errors@~2.0.1
  • deps: raw-body@~2.5.3

v1.20.3

Compare Source

===================

  • deps: qs@​6.13.0
  • add depth option to customize the depth level in the parser
  • IMPORTANT: The default depth level for parsing URL-encoded data is now 32 (previously was Infinity)

v1.20.2

Compare Source

===================

  • Fix strict json error message on Node.js 19+
  • deps: content-type@~1.0.5
    • perf: skip value escaping when unnecessary
  • deps: raw-body@​2.5.2

  • If you want to rebase/retry this PR, check this box

@mend-for-github-com
mend-for-github-com Bot force-pushed the whitesource-remediate/main-body-parser-1.20.x-lockfile branch from fbb06ff to 8914abd Compare April 9, 2026 01:17
@mend-for-github-com
mend-for-github-com Bot force-pushed the whitesource-remediate/main-body-parser-1.20.x-lockfile branch 2 times, most recently from 0795bc4 to e624346 Compare April 18, 2026 12:36
@mend-for-github-com mend-for-github-com Bot changed the title chore(deps): update dependency body-parser to v1.20.4 (main) chore(deps): update dependency body-parser to v1.20.3 (main) Apr 18, 2026
@mend-for-github-com
mend-for-github-com Bot force-pushed the whitesource-remediate/main-body-parser-1.20.x-lockfile branch from e624346 to b5d7953 Compare April 26, 2026 13:14
@mend-for-github-com mend-for-github-com Bot changed the title chore(deps): update dependency body-parser to v1.20.3 (main) chore(deps): update dependency body-parser to v1.20.4 (main) Apr 26, 2026
@mend-for-github-com
mend-for-github-com Bot force-pushed the whitesource-remediate/main-body-parser-1.20.x-lockfile branch from b5d7953 to 433f2ed Compare April 26, 2026 20:03
@mend-for-github-com mend-for-github-com Bot changed the title chore(deps): update dependency body-parser to v1.20.4 (main) chore(deps): update dependency body-parser to v1.20.3 (main) Apr 26, 2026
@mend-for-github-com
mend-for-github-com Bot force-pushed the whitesource-remediate/main-body-parser-1.20.x-lockfile branch 2 times, most recently from 4d203fc to 73cbd04 Compare May 29, 2026 07:15
@mend-for-github-com
mend-for-github-com Bot force-pushed the whitesource-remediate/main-body-parser-1.20.x-lockfile branch 2 times, most recently from 970c584 to cce1a38 Compare June 15, 2026 06:51
@mend-for-github-com
mend-for-github-com Bot force-pushed the whitesource-remediate/main-body-parser-1.20.x-lockfile branch from cce1a38 to e8c698a Compare July 12, 2026 15:01
@mend-for-github-com mend-for-github-com Bot changed the title chore(deps): update dependency body-parser to v1.20.3 (main) chore(deps): update dependency body-parser to v1.20.6 (main) Jul 12, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants