expressjs body-parser vulnerabilities

Latest expressjs body-parser CVEs

Newest publication first

1. CVE-2024-45590 body-parser vulnerable to denial of service when url encoding is enabled

   Published 2024-09-10

   High·CVSS 7.5 EPSS 0.82%

   body-parser is Node.js body parsing middleware. body-parser <1.20.3 is vulnerable to denial of service when url encoding is enabled. A malicious actor using a specially crafted payload could flood the server with a large number of requests, resulting in denial of service. This is...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.