Skip to content

Update dependency body-parser to v1.20.3 #6

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

mend-for-github-com[bot]
Copy link

@mend-for-github-com mend-for-github-com bot commented Nov 29, 2022

This PR contains the following updates:

Package Type Update Change
body-parser dependencies minor 1.19.1 -> 1.20.3

By merging this PR, the issue #5 will be automatically resolved and closed:

Severity CVSS Score Vulnerability
High High 7.5 CVE-2022-24999
High High 7.5 CVE-2024-45590

Release Notes

expressjs/body-parser (body-parser)

v1.20.3

Compare Source

===================

  • deps: qs@6.13.0
  • add depth option to customize the depth level in the parser
  • IMPORTANT: The default depth level for parsing URL-encoded data is now 32 (previously was Infinity)

v1.20.2

Compare Source

===================

  • Fix strict json error message on Node.js 19+
  • deps: content-type@~1.0.5
    • perf: skip value escaping when unnecessary
  • deps: raw-body@2.5.2

v1.20.1

Compare Source

===================

  • deps: qs@6.11.0
  • perf: remove unnecessary object clone

v1.20.0

Compare Source

===================

  • Fix error message for json parse whitespace in strict
  • Fix internal error when inflated body exceeds limit
  • Prevent loss of async hooks context
  • Prevent hanging when request already read
  • deps: depd@2.0.0
    • Replace internal eval usage with Function constructor
    • Use instance methods on process to check for listeners
  • deps: http-errors@2.0.0
    • deps: depd@2.0.0
    • deps: statuses@2.0.1
  • deps: on-finished@2.4.1
  • deps: qs@6.10.3
  • deps: raw-body@2.5.1
    • deps: http-errors@2.0.0

v1.19.2

Compare Source

===================

  • deps: bytes@3.1.2
  • deps: qs@6.9.7
    • Fix handling of __proto__ keys
  • deps: raw-body@2.4.3
    • deps: bytes@3.1.2

  • If you want to rebase/retry this PR, check this box

@mend-for-github-com mend-for-github-com bot added the security fix Security fix generated by Mend label Nov 29, 2022
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/body-parser-1.x-lockfile branch 5 times, most recently from b277a66 to ce5ef1e Compare December 5, 2022 11:27
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/body-parser-1.x-lockfile branch 5 times, most recently from a3bf6a4 to c854f4d Compare December 17, 2022 08:50
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/body-parser-1.x-lockfile branch 2 times, most recently from 2804eb5 to 00a8958 Compare December 19, 2022 02:12
@mend-for-github-com mend-for-github-com bot changed the title Update dependency body-parser to v1.19.2 Update dependency body-parser to v1.19.2 - autoclosed Mar 27, 2023
@mend-for-github-com mend-for-github-com bot deleted the whitesource-remediate/body-parser-1.x-lockfile branch March 27, 2023 09:23
@mend-for-github-com mend-for-github-com bot changed the title Update dependency body-parser to v1.19.2 - autoclosed Update dependency body-parser to v1.19.2 Mar 30, 2023
@mend-for-github-com mend-for-github-com bot reopened this Mar 30, 2023
@mend-for-github-com mend-for-github-com bot restored the whitesource-remediate/body-parser-1.x-lockfile branch March 30, 2023 18:38
@mend-for-github-com mend-for-github-com bot changed the title Update dependency body-parser to v1.19.2 Update dependency body-parser to v1.19.2 - autoclosed Jun 16, 2023
@mend-for-github-com mend-for-github-com bot deleted the whitesource-remediate/body-parser-1.x-lockfile branch June 16, 2023 03:58
@mend-for-github-com mend-for-github-com bot changed the title Update dependency body-parser to v1.19.2 - autoclosed Update dependency body-parser to v1.19.2 Jun 18, 2023
@mend-for-github-com mend-for-github-com bot reopened this Jun 18, 2023
@mend-for-github-com mend-for-github-com bot restored the whitesource-remediate/body-parser-1.x-lockfile branch June 18, 2023 11:44
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/body-parser-1.x-lockfile branch 3 times, most recently from 483c2e6 to c1140de Compare June 20, 2023 12:37
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/body-parser-1.x-lockfile branch 2 times, most recently from 27b452b to d787304 Compare October 3, 2023 05:01
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/body-parser-1.x-lockfile branch 3 times, most recently from 4ba5f6e to 6b8133e Compare January 2, 2024 04:55
@mend-for-github-com mend-for-github-com bot changed the title Update dependency body-parser to v1.19.2 Update dependency body-parser to v1.20.3 Sep 25, 2024
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/body-parser-1.x-lockfile branch from 6b8133e to d089d47 Compare September 25, 2024 21:57
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/body-parser-1.x-lockfile branch from d089d47 to bdcb352 Compare November 9, 2024 07:05
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/body-parser-1.x-lockfile branch 5 times, most recently from 34cdca0 to 1db5da2 Compare December 6, 2024 20:29
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/body-parser-1.x-lockfile branch 3 times, most recently from 00c0f65 to 11bf0e4 Compare December 16, 2024 07:20
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/body-parser-1.x-lockfile branch 2 times, most recently from 8502df4 to bd7b8fd Compare December 20, 2024 05:34
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/body-parser-1.x-lockfile branch from bd7b8fd to 797d74b Compare January 2, 2025 22:09
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/body-parser-1.x-lockfile branch 2 times, most recently from cd50ef4 to 869c93d Compare January 15, 2025 05:54
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/body-parser-1.x-lockfile branch 2 times, most recently from 313bbed to ab6a062 Compare February 13, 2025 07:41
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/body-parser-1.x-lockfile branch from ab6a062 to 658ca6d Compare February 23, 2025 08:01
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/body-parser-1.x-lockfile branch from 658ca6d to a3e84b5 Compare March 4, 2025 07:20
@mend-for-github-com mend-for-github-com bot changed the title Update dependency body-parser to v1.20.3 Update dependency body-parser to v1.20.3 - autoclosed Mar 21, 2025
@mend-for-github-com mend-for-github-com bot deleted the whitesource-remediate/body-parser-1.x-lockfile branch March 21, 2025 04:53
@mend-for-github-com mend-for-github-com bot changed the title Update dependency body-parser to v1.20.3 - autoclosed Update dependency body-parser to v1.20.3 Mar 26, 2025
@mend-for-github-com mend-for-github-com bot reopened this Mar 26, 2025
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/body-parser-1.x-lockfile branch from d63aa77 to a3e84b5 Compare March 26, 2025 14:45
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
security fix Security fix generated by Mend
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants