Skip to content
This repository was archived by the owner on Jul 23, 2026. It is now read-only.

chore(deps): update dependency body-parser to v1.20.6 - #22

Open
mend-for-github-com[bot] wants to merge 1 commit into
cslfrom
whitesource-remediate/body-parser-1.x-lockfile
Open

chore(deps): update dependency body-parser to v1.20.6#22
mend-for-github-com[bot] wants to merge 1 commit into
cslfrom
whitesource-remediate/body-parser-1.x-lockfile

Conversation

@mend-for-github-com

@mend-for-github-commend-for-github-comBot commented Dec 30, 2025

Copy link
Copy Markdown

This PR contains the following updates:

PackageChangeAgeConfidence
body-parser1.20.31.20.6ageconfidence

By merging this PR, the below issues will be automatically resolved and closed:

Severity CVSS ScoreVulnerabilityGitHub Issue
Medium5.3CVE-2026-8723#-1
Low3.7CVE-2025-15284#21
Low3.7CVE-2026-12590#-1
Low3.7CVE-2026-2391#-1

Release Notes

expressjs/body-parser (body-parser)

v1.20.6

Compare Source

===================

  • Security fix for GHSA-v422-hmwv-36x6
  • fix: improve limit option validation (#​698)
    • Invalid limit values (e.g. unparseable strings or NaN) now throw instead of being silently ignored, which previously disabled size limit enforcement
    • null and undefined fall back to the default 100kb limit

v1.20.5

Compare Source

===================

  • refactor(json): simplify strict mode error string construction
  • fix: extended urlencoded parsing of arrays with >100 elements (#​716)
  • deps: qs@~6.15.1

v1.20.4

Compare Source

===================

  • deps: qs@~6.14.0
  • deps: use tilde notation for dependencies
  • deps: http-errors@~2.0.1
  • deps: raw-body@~2.5.3

  • If you want to rebase/retry this PR, check this box

@mend-for-github-commend-for-github-comBot added the security fix Security fix generated by Mend label Dec 30, 2025
@mend-for-github-com
mend-for-github-comBotforce-pushed the whitesource-remediate/body-parser-1.x-lockfile branch from c12e7ac to 51700d0CompareFebruary 12, 2026 14:35
@mend-for-github-com
mend-for-github-comBotforce-pushed the whitesource-remediate/body-parser-1.x-lockfile branch from 51700d0 to 92fa0c0CompareApril 9, 2026 15:49
@mend-for-github-com
mend-for-github-comBotforce-pushed the whitesource-remediate/body-parser-1.x-lockfile branch from 92fa0c0 to d3d43a6CompareJune 9, 2026 16:24
@mend-for-github-commend-for-github-comBot changed the title chore(deps): update dependency body-parser to v1.20.4chore(deps): update dependency body-parser to v1.20.5Jun 22, 2026
@mend-for-github-com
mend-for-github-comBotforce-pushed the whitesource-remediate/body-parser-1.x-lockfile branch 2 times, most recently from ba1f528 to e79695cCompareJune 25, 2026 15:57
@mend-for-github-com
mend-for-github-comBotforce-pushed the whitesource-remediate/body-parser-1.x-lockfile branch from e79695c to de138f2CompareJuly 12, 2026 15:45
@mend-for-github-commend-for-github-comBot changed the title chore(deps): update dependency body-parser to v1.20.5chore(deps): update dependency body-parser to v1.20.6Jul 12, 2026
Sign up for freeto subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

security fixSecurity fix generated by Mend

Development

Successfully merging this pull request may close these issues.

0 participants