Update dependency body-parser to v1.20.4 #22

mend-for-github-com · 2024-01-23T16:10:36Z

This PR contains the following updates:

Package	Type	Update	Change
body-parser	dependencies	minor	`1.18.3` -> `1.20.4`

By merging this PR, the issue #21 will be automatically resolved and closed:

Severity	CVSS Score	Vulnerability
High	7.5	CVE-2024-45590
High	7.5	CVE-2025-15284

Release Notes

expressjs/body-parser (body-parser)

`v1.20.4`

Compare Source

===================

deps: qs@~6.14.0
deps: use tilde notation for dependencies
deps: http-errors@~2.0.1
deps: raw-body@~2.5.3

`v1.20.3`

Compare Source

===================

deps: qs@6.13.0
add depth option to customize the depth level in the parser
IMPORTANT: The default depth level for parsing URL-encoded data is now 32 (previously was Infinity)

`v1.20.2`

Compare Source

===================

Fix strict json error message on Node.js 19+
deps: content-type@~1.0.5
- perf: skip value escaping when unnecessary
deps: raw-body@2.5.2

`v1.20.1`

Compare Source

===================

deps: qs@6.11.0
perf: remove unnecessary object clone

`v1.20.0`

Compare Source

===================

Fix error message for json parse whitespace in strict
Fix internal error when inflated body exceeds limit
Prevent loss of async hooks context
Prevent hanging when request already read
deps: depd@2.0.0
- Replace internal eval usage with Function constructor
- Use instance methods on process to check for listeners
deps: http-errors@2.0.0
- deps: depd@2.0.0
- deps: statuses@2.0.1
deps: on-finished@2.4.1
deps: qs@6.10.3
deps: raw-body@2.5.1
- deps: http-errors@2.0.0

`v1.19.2`

Compare Source

===================

deps: bytes@3.1.2
deps: qs@6.9.7
- Fix handling of __proto__ keys
deps: raw-body@2.4.3
- deps: bytes@3.1.2

`v1.19.1`

Compare Source

===================

deps: bytes@3.1.1
deps: http-errors@1.8.1
- deps: inherits@2.0.4
- deps: toidentifier@1.0.1
- deps: setprototypeof@1.2.0
deps: qs@6.9.6
deps: raw-body@2.4.2
- deps: bytes@3.1.1
- deps: http-errors@1.8.1
deps: safe-buffer@5.2.1
deps: type-is@~1.6.18

`v1.19.0`

Compare Source

===================

deps: bytes@3.1.0
- Add petabyte (pb) support
deps: http-errors@1.7.2
- Set constructor name when possible
- deps: setprototypeof@1.1.1
- deps: statuses@'>= 1.5.0 < 2'
deps: iconv-lite@0.4.24
- Added encoding MIK
deps: qs@6.7.0
- Fix parsing array brackets after index
deps: raw-body@2.4.0
- deps: bytes@3.1.0
- deps: http-errors@1.7.2
- deps: iconv-lite@0.4.24
deps: type-is@~1.6.17
- deps: mime-types@~2.1.24
- perf: prevent internal throw on invalid type

If you want to rebase/retry this PR, check this box

sonarqubecloud · 2024-02-25T12:18:36Z

Quality Gate passed

Issues
0 New issues

Measures
0 Security Hotspots
No data about Coverage
0.0% Duplication on New Code

See analysis details on SonarCloud

sonarqubecloud · 2024-04-07T06:49:03Z

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
No data about Coverage
0.0% Duplication on New Code

See analysis details on SonarCloud

sonarqubecloud · 2024-05-16T06:37:34Z

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
No data about Coverage
0.0% Duplication on New Code

See analysis details on SonarCloud

sonarqubecloud · 2025-03-24T01:17:44Z

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

sonarqubecloud · 2025-06-29T11:46:25Z

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

sonarqubecloud · 2025-10-01T14:02:00Z

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

sonarqubecloud · 2025-12-30T12:23:39Z

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

mend-for-github-com bot added the security fix Security fix generated by Mend label Jan 23, 2024

mend-for-github-com bot force-pushed the whitesource-remediate/body-parser-1.x-lockfile branch from c502662 to 31cf922 Compare February 21, 2024 06:55

mend-for-github-com bot changed the title ~~chore(deps): update dependency body-parser to v1.19.0~~ Update dependency body-parser to v1.19.0 Feb 21, 2024

mend-for-github-com bot force-pushed the whitesource-remediate/body-parser-1.x-lockfile branch 2 times, most recently from c923547 to 4cc0db2 Compare February 25, 2024 12:18

mend-for-github-com bot changed the title ~~Update dependency body-parser to v1.19.0~~ Update dependency body-parser to v1.19.0 - autoclosed Apr 2, 2024

mend-for-github-com bot closed this Apr 2, 2024

mend-for-github-com bot deleted the whitesource-remediate/body-parser-1.x-lockfile branch April 2, 2024 18:15

mend-for-github-com bot changed the title ~~Update dependency body-parser to v1.19.0 - autoclosed~~ Update dependency body-parser to v1.19.0 Apr 7, 2024

mend-for-github-com bot reopened this Apr 7, 2024

mend-for-github-com bot restored the whitesource-remediate/body-parser-1.x-lockfile branch April 7, 2024 06:48

mend-for-github-com bot force-pushed the whitesource-remediate/body-parser-1.x-lockfile branch from 4cc0db2 to 3c0d349 Compare April 7, 2024 06:48

mend-for-github-com bot force-pushed the whitesource-remediate/body-parser-1.x-lockfile branch from 3c0d349 to 88ff6e9 Compare May 16, 2024 06:37

mend-for-github-com bot force-pushed the whitesource-remediate/body-parser-1.x-lockfile branch from 88ff6e9 to 872a350 Compare August 27, 2024 08:26

mend-for-github-com bot had a problem deploying to frogbot August 27, 2024 08:26 Failure

mend-for-github-com bot force-pushed the whitesource-remediate/body-parser-1.x-lockfile branch from 872a350 to abd3b27 Compare August 28, 2024 08:53

mend-for-github-com bot had a problem deploying to frogbot August 28, 2024 08:53 Failure

mend-for-github-com bot changed the title ~~Update dependency body-parser to v1.19.0~~ Update dependency body-parser to v1.20.3 Sep 11, 2024

mend-for-github-com bot force-pushed the whitesource-remediate/body-parser-1.x-lockfile branch from abd3b27 to 75d4158 Compare September 11, 2024 12:24

mend-for-github-com bot had a problem deploying to frogbot September 11, 2024 12:24 Failure

mend-for-github-com bot force-pushed the whitesource-remediate/body-parser-1.x-lockfile branch from 75d4158 to b8263d4 Compare November 9, 2024 12:07

mend-for-github-com bot had a problem deploying to frogbot November 9, 2024 12:07 Failure

mend-for-github-com bot force-pushed the whitesource-remediate/body-parser-1.x-lockfile branch from b8263d4 to 8089959 Compare November 30, 2024 08:26

mend-for-github-com bot had a problem deploying to frogbot November 30, 2024 08:26 Failure

mend-for-github-com bot force-pushed the whitesource-remediate/body-parser-1.x-lockfile branch from 8089959 to 539ebe9 Compare December 2, 2024 06:00

mend-for-github-com bot had a problem deploying to frogbot December 2, 2024 06:00 Failure

mend-for-github-com bot force-pushed the whitesource-remediate/body-parser-1.x-lockfile branch from 539ebe9 to dacf4ff Compare December 3, 2024 07:38

mend-for-github-com bot changed the title ~~Update dependency body-parser to v1.20.3 - autoclosed~~ Update dependency body-parser to v1.20.3 Mar 24, 2025

mend-for-github-com bot reopened this Mar 24, 2025

mend-for-github-com bot force-pushed the whitesource-remediate/body-parser-1.x-lockfile branch from 36bfd47 to 274595c Compare March 24, 2025 01:17

mend-for-github-com bot force-pushed the whitesource-remediate/body-parser-1.x-lockfile branch from 274595c to e4bd67e Compare June 29, 2025 11:45

mend-for-github-com bot had a problem deploying to frogbot June 29, 2025 11:46 Failure

mend-for-github-com bot force-pushed the whitesource-remediate/body-parser-1.x-lockfile branch from e4bd67e to 2a0f51c Compare September 26, 2025 13:45

mend-for-github-com bot had a problem deploying to frogbot September 26, 2025 13:45 Failure

mend-for-github-com bot force-pushed the whitesource-remediate/body-parser-1.x-lockfile branch from 2a0f51c to 522e5d1 Compare September 30, 2025 12:37

mend-for-github-com bot had a problem deploying to frogbot September 30, 2025 12:37 Failure

mend-for-github-com bot force-pushed the whitesource-remediate/body-parser-1.x-lockfile branch from 522e5d1 to f528ca9 Compare October 1, 2025 14:01

mend-for-github-com bot had a problem deploying to frogbot October 1, 2025 14:01 Failure

mend-for-github-com bot force-pushed the whitesource-remediate/body-parser-1.x-lockfile branch from f528ca9 to 5a368de Compare November 20, 2025 23:51

mend-for-github-com bot had a problem deploying to frogbot November 20, 2025 23:51 Failure

mend-for-github-com bot changed the title ~~Update dependency body-parser to v1.20.3~~ Update dependency body-parser to v1.20.3 - autoclosed Nov 25, 2025

mend-for-github-com bot closed this Nov 25, 2025

mend-for-github-com bot changed the title ~~Update dependency body-parser to v1.20.3 - autoclosed~~ Update dependency body-parser to v1.20.3 Nov 26, 2025

mend-for-github-com bot reopened this Nov 26, 2025

mend-for-github-com bot force-pushed the whitesource-remediate/body-parser-1.x-lockfile branch 2 times, most recently from 5a368de to d2607c9 Compare November 26, 2025 18:23

mend-for-github-com bot had a problem deploying to frogbot November 26, 2025 18:23 Failure

mend-for-github-com bot force-pushed the whitesource-remediate/body-parser-1.x-lockfile branch from d2607c9 to 484c368 Compare December 29, 2025 00:02

mend-for-github-com bot had a problem deploying to frogbot December 29, 2025 00:02 Failure

Update dependency body-parser to v1.20.4

b2aa522

mend-for-github-com bot changed the title ~~Update dependency body-parser to v1.20.3~~ Update dependency body-parser to v1.20.4 Dec 30, 2025

mend-for-github-com bot force-pushed the whitesource-remediate/body-parser-1.x-lockfile branch from 484c368 to b2aa522 Compare December 30, 2025 12:23

mend-for-github-com bot had a problem deploying to frogbot December 30, 2025 12:23 Failure

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Update dependency body-parser to v1.20.4 #22

Update dependency body-parser to v1.20.4 #22

Uh oh!

mend-for-github-com bot commented Jan 23, 2024 •

edited

Loading

Uh oh!

sonarqubecloud bot commented Feb 25, 2024

Uh oh!

sonarqubecloud bot commented Apr 7, 2024

Uh oh!

sonarqubecloud bot commented May 16, 2024

Uh oh!

sonarqubecloud bot commented Mar 24, 2025

Uh oh!

sonarqubecloud bot commented Jun 29, 2025

Uh oh!

sonarqubecloud bot commented Oct 1, 2025

Uh oh!

sonarqubecloud bot commented Dec 30, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Update dependency body-parser to v1.20.4 #22

Are you sure you want to change the base?

Update dependency body-parser to v1.20.4 #22

Uh oh!

Conversation

mend-for-github-com bot commented Jan 23, 2024 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Uh oh!

sonarqubecloud bot commented Feb 25, 2024

Quality Gate passed

Uh oh!

sonarqubecloud bot commented Apr 7, 2024

Quality Gate passed

Uh oh!

sonarqubecloud bot commented May 16, 2024

Quality Gate passed

Uh oh!

sonarqubecloud bot commented Mar 24, 2025

Quality Gate passed

Uh oh!

sonarqubecloud bot commented Jun 29, 2025

Quality Gate passed

Uh oh!

sonarqubecloud bot commented Oct 1, 2025

Quality Gate passed

Uh oh!

sonarqubecloud bot commented Dec 30, 2025

Quality Gate passed

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

mend-for-github-com bot commented Jan 23, 2024 •

edited

Loading