Body Parser
Approved changes feed: RSS · Atom
cpe:2.3:a:openjsf:body-parser:*:*:*:*:*:node.js:*:*
part: a version: * update: *
| Vendor | Openjsf (e371b9eb-ab86-58dc-866f-7af8b12292ef) |
|---|---|
| Product | Body Parser (0a44cec9-81e1-58cf-a1ab-5149f9cd2430) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | node.js |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/expressjs/body-parser |
purl2cpe | 2026-06-01 10:14:22.258492 |
pkg:npm/body-parser |
purl2cpe | 2026-06-01 10:14:22.258494 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-45590 |
vulnerable | 2026-06-08 06:48:08.696580 |
body-parser vulnerable to denial of service when url encoding is enabled
HIGH (7.5)
body-parser is Node.js body parsing middleware. body-parser <1.20.3 is vulnerable to denial of service when url encoding is enabled. A malicious actor using a specially crafted payload could flood the server with a large number of requests, resulting in denial of service. This issue is patched in 1.20.3.
Published: 2024-09-10T15:54:02.330Z
Updated: 2024-09-10T18:47:22.965Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.