Skip to content
This repository was archived by the owner on Jul 23, 2026. It is now read-only.

chore(deps): update dependency body-parser to v1.20.6#22

Open
mend-for-github-com[bot] wants to merge 1 commit into
cslfrom
whitesource-remediate/body-parser-1.x-lockfile
Open

chore(deps): update dependency body-parser to v1.20.6#22
mend-for-github-com[bot] wants to merge 1 commit into
cslfrom
whitesource-remediate/body-parser-1.x-lockfile

Conversation

@mend-for-github-com

@mend-for-github-com mend-for-github-com Bot commented Dec 30, 2025

Copy link
Copy Markdown

This PR contains the following updates:

Package Change Age Confidence
body-parser 1.20.31.20.6 age confidence

By merging this PR, the below issues will be automatically resolved and closed:

Severity CVSS Score Vulnerability GitHub Issue
Medium 5.3 CVE-2026-8723 #-1
Low 3.7 CVE-2025-15284 #21
Low 3.7 CVE-2026-12590 #-1
Low 3.7 CVE-2026-2391 #-1

Release Notes

expressjs/body-parser (body-parser)

v1.20.6

Compare Source

===================

  • Security fix for GHSA-v422-hmwv-36x6
  • fix: improve limit option validation (#​698)
    • Invalid limit values (e.g. unparseable strings or NaN) now throw instead of being silently ignored, which previously disabled size limit enforcement
    • null and undefined fall back to the default 100kb limit

v1.20.5

Compare Source

===================

  • refactor(json): simplify strict mode error string construction
  • fix: extended urlencoded parsing of arrays with >100 elements (#​716)
  • deps: qs@~6.15.1

v1.20.4

Compare Source

===================

  • deps: qs@~6.14.0
  • deps: use tilde notation for dependencies
  • deps: http-errors@~2.0.1
  • deps: raw-body@~2.5.3

  • If you want to rebase/retry this PR, check this box

@mend-for-github-com mend-for-github-com Bot added the security fix Security fix generated by Mend label Dec 30, 2025
@mend-for-github-com
mend-for-github-com Bot force-pushed the whitesource-remediate/body-parser-1.x-lockfile branch from c12e7ac to 51700d0 Compare February 12, 2026 14:35
@mend-for-github-com
mend-for-github-com Bot force-pushed the whitesource-remediate/body-parser-1.x-lockfile branch from 51700d0 to 92fa0c0 Compare April 9, 2026 15:49
@mend-for-github-com
mend-for-github-com Bot force-pushed the whitesource-remediate/body-parser-1.x-lockfile branch from 92fa0c0 to d3d43a6 Compare June 9, 2026 16:24
@mend-for-github-com mend-for-github-com Bot changed the title chore(deps): update dependency body-parser to v1.20.4 chore(deps): update dependency body-parser to v1.20.5 Jun 22, 2026
@mend-for-github-com
mend-for-github-com Bot force-pushed the whitesource-remediate/body-parser-1.x-lockfile branch 2 times, most recently from ba1f528 to e79695c Compare June 25, 2026 15:57
@mend-for-github-com
mend-for-github-com Bot force-pushed the whitesource-remediate/body-parser-1.x-lockfile branch from e79695c to de138f2 Compare July 12, 2026 15:45
@mend-for-github-com mend-for-github-com Bot changed the title chore(deps): update dependency body-parser to v1.20.5 chore(deps): update dependency body-parser to v1.20.6 Jul 12, 2026
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

security fix Security fix generated by Mend

Development

Successfully merging this pull request may close these issues.

0 participants