Skip to content

chore(deps): update peerdependency body-parser to ^1.20.3 [security]#46

Open
renovate[bot] wants to merge 1 commit intodevelopfrom
renovate/npm-body-parser-vulnerability
Open

chore(deps): update peerdependency body-parser to ^1.20.3 [security]#46
renovate[bot] wants to merge 1 commit intodevelopfrom
renovate/npm-body-parser-vulnerability

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Sep 16, 2024

This PR contains the following updates:

Package Change Age Confidence
body-parser ^1.20.2^1.20.3 age confidence

GitHub Vulnerability Alerts

CVE-2024-45590

Impact

body-parser <1.20.3 is vulnerable to denial of service when url encoding is enabled. A malicious actor using a specially crafted payload could flood the server with a large number of requests, resulting in denial of service.

Patches

this issue is patched in 1.20.3

References


Release Notes

expressjs/body-parser (body-parser)

v1.20.3

Compare Source

===================

  • deps: qs@​6.13.0
  • add depth option to customize the depth level in the parser
  • IMPORTANT: The default depth level for parsing URL-encoded data is now 32 (previously was Infinity)

Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@changeset-bot
Copy link

changeset-bot bot commented Sep 16, 2024

⚠️ No Changeset found

Latest commit: d2360b8

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@coderabbitai
Copy link

coderabbitai bot commented Sep 16, 2024

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

  • 🔍 Trigger a full review

Comment @coderabbitai help to get the list of available commands and usage tips.

@renovate renovate bot changed the title chore(deps): update peerdependency body-parser to ^1.20.3 [security] chore(deps): update peerdependency body-parser to ^1.20.4 [security] Dec 3, 2025
@renovate renovate bot force-pushed the renovate/npm-body-parser-vulnerability branch from 24ecc03 to f564c29 Compare December 3, 2025 17:09
@renovate renovate bot changed the title chore(deps): update peerdependency body-parser to ^1.20.4 [security] chore(deps): update peerdependency body-parser to ^1.20.3 [security] Dec 3, 2025
@renovate renovate bot force-pushed the renovate/npm-body-parser-vulnerability branch from f564c29 to b209b82 Compare December 3, 2025 21:45
@renovate renovate bot changed the title chore(deps): update peerdependency body-parser to ^1.20.3 [security] chore(deps): update peerdependency body-parser to ^1.20.4 [security] Dec 10, 2025
@renovate renovate bot force-pushed the renovate/npm-body-parser-vulnerability branch 2 times, most recently from 16c9be9 to 6af8e1b Compare December 10, 2025 19:55
@renovate renovate bot changed the title chore(deps): update peerdependency body-parser to ^1.20.4 [security] chore(deps): update peerdependency body-parser to ^1.20.3 [security] Dec 10, 2025
@renovate renovate bot changed the title chore(deps): update peerdependency body-parser to ^1.20.3 [security] chore(deps): update peerdependency body-parser to ^1.20.4 [security] Dec 15, 2025
@renovate renovate bot force-pushed the renovate/npm-body-parser-vulnerability branch 2 times, most recently from d37ccd3 to 676e9f3 Compare December 15, 2025 20:45
@renovate renovate bot changed the title chore(deps): update peerdependency body-parser to ^1.20.4 [security] chore(deps): update peerdependency body-parser to ^1.20.3 [security] Dec 15, 2025
@renovate renovate bot changed the title chore(deps): update peerdependency body-parser to ^1.20.3 [security] chore(deps): update peerdependency body-parser to ^1.20.4 [security] Dec 30, 2025
@renovate renovate bot force-pushed the renovate/npm-body-parser-vulnerability branch from 676e9f3 to 80cd484 Compare December 30, 2025 14:13
@renovate renovate bot changed the title chore(deps): update peerdependency body-parser to ^1.20.4 [security] chore(deps): update peerdependency body-parser to ^1.20.3 [security] Dec 30, 2025
@renovate renovate bot force-pushed the renovate/npm-body-parser-vulnerability branch from 80cd484 to 5472eea Compare December 30, 2025 17:09
@renovate renovate bot changed the title chore(deps): update peerdependency body-parser to ^1.20.3 [security] chore(deps): update peerdependency body-parser to ^1.20.4 [security] Dec 31, 2025
@renovate renovate bot force-pushed the renovate/npm-body-parser-vulnerability branch from 5472eea to 3f7cf0b Compare December 31, 2025 14:04
@renovate renovate bot changed the title chore(deps): update peerdependency body-parser to ^1.20.4 [security] chore(deps): update peerdependency body-parser to ^1.20.3 [security] Dec 31, 2025
@renovate renovate bot force-pushed the renovate/npm-body-parser-vulnerability branch from 3f7cf0b to 6a4b826 Compare December 31, 2025 20:47
@renovate renovate bot changed the title chore(deps): update peerdependency body-parser to ^1.20.3 [security] chore(deps): update peerdependency body-parser to ^1.20.4 [security] Jan 8, 2026
@renovate renovate bot force-pushed the renovate/npm-body-parser-vulnerability branch 2 times, most recently from 25b928c to 948a5ed Compare January 9, 2026 00:39
@renovate renovate bot changed the title chore(deps): update peerdependency body-parser to ^1.20.4 [security] chore(deps): update peerdependency body-parser to ^1.20.3 [security] Jan 9, 2026
@renovate renovate bot changed the title chore(deps): update peerdependency body-parser to ^1.20.3 [security] chore(deps): update peerdependency body-parser to ^1.20.4 [security] Jan 19, 2026
@renovate renovate bot force-pushed the renovate/npm-body-parser-vulnerability branch from 948a5ed to 309a53b Compare January 19, 2026 15:41
@renovate renovate bot changed the title chore(deps): update peerdependency body-parser to ^1.20.4 [security] chore(deps): update peerdependency body-parser to ^1.20.3 [security] Jan 19, 2026
@renovate renovate bot changed the title chore(deps): update peerdependency body-parser to ^1.20.3 [security] chore(deps): update peerdependency body-parser to ^1.20.4 [security] Feb 2, 2026
@renovate renovate bot force-pushed the renovate/npm-body-parser-vulnerability branch from e6ca14b to f11f749 Compare February 2, 2026 14:50
@codecov
Copy link

codecov bot commented Feb 2, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 95.77%. Comparing base (a473893) to head (f11f749).

Additional details and impacted files
@@           Coverage Diff            @@
##           develop      #46   +/-   ##
========================================
  Coverage    95.77%   95.77%           
========================================
  Files            1        1           
  Lines           71       71           
  Branches        27       27           
========================================
  Hits            68       68           
  Misses           1        1           
  Partials         2        2           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@renovate renovate bot changed the title chore(deps): update peerdependency body-parser to ^1.20.4 [security] chore(deps): update peerdependency body-parser to ^1.20.3 [security] Feb 2, 2026
@renovate renovate bot force-pushed the renovate/npm-body-parser-vulnerability branch from f11f749 to 826e405 Compare February 2, 2026 21:35
@renovate renovate bot changed the title chore(deps): update peerdependency body-parser to ^1.20.3 [security] chore(deps): update peerdependency body-parser to ^1.20.4 [security] Feb 12, 2026
@renovate renovate bot force-pushed the renovate/npm-body-parser-vulnerability branch from 826e405 to f0ee500 Compare February 12, 2026 14:37
@renovate renovate bot changed the title chore(deps): update peerdependency body-parser to ^1.20.4 [security] chore(deps): update peerdependency body-parser to ^1.20.3 [security] Feb 12, 2026
@renovate renovate bot force-pushed the renovate/npm-body-parser-vulnerability branch from f0ee500 to eb06b5d Compare February 12, 2026 20:05
@renovate renovate bot changed the title chore(deps): update peerdependency body-parser to ^1.20.3 [security] chore(deps): update peerdependency body-parser to ^1.20.4 [security] Feb 16, 2026
@renovate renovate bot force-pushed the renovate/npm-body-parser-vulnerability branch from eb06b5d to c88dee4 Compare February 16, 2026 15:11
@renovate renovate bot changed the title chore(deps): update peerdependency body-parser to ^1.20.4 [security] chore(deps): update peerdependency body-parser to ^1.20.3 [security] Feb 16, 2026
@renovate renovate bot force-pushed the renovate/npm-body-parser-vulnerability branch 2 times, most recently from b1c200e to 968f67f Compare February 17, 2026 21:13
@renovate renovate bot changed the title chore(deps): update peerdependency body-parser to ^1.20.3 [security] chore(deps): update peerdependency body-parser to ^1.20.4 [security] Feb 17, 2026
@renovate renovate bot changed the title chore(deps): update peerdependency body-parser to ^1.20.4 [security] chore(deps): update peerdependency body-parser to ^1.20.3 [security] Feb 18, 2026
@renovate renovate bot force-pushed the renovate/npm-body-parser-vulnerability branch from 968f67f to ca047c1 Compare February 18, 2026 01:53
@renovate renovate bot changed the title chore(deps): update peerdependency body-parser to ^1.20.3 [security] chore(deps): update peerdependency body-parser to ^1.20.4 [security] Mar 5, 2026
@renovate renovate bot force-pushed the renovate/npm-body-parser-vulnerability branch from ca047c1 to 001fcf0 Compare March 5, 2026 10:13
@renovate renovate bot changed the title chore(deps): update peerdependency body-parser to ^1.20.4 [security] chore(deps): update peerdependency body-parser to ^1.20.3 [security] Mar 5, 2026
@renovate renovate bot force-pushed the renovate/npm-body-parser-vulnerability branch from 001fcf0 to 73a5b50 Compare March 5, 2026 12:42
@renovate renovate bot changed the title chore(deps): update peerdependency body-parser to ^1.20.3 [security] chore(deps): update peerdependency body-parser to ^1.20.4 [security] Mar 5, 2026
@renovate renovate bot force-pushed the renovate/npm-body-parser-vulnerability branch 2 times, most recently from e98d9b3 to d5e43f4 Compare March 5, 2026 22:54
@renovate renovate bot changed the title chore(deps): update peerdependency body-parser to ^1.20.4 [security] chore(deps): update peerdependency body-parser to ^1.20.3 [security] Mar 5, 2026
@renovate renovate bot changed the title chore(deps): update peerdependency body-parser to ^1.20.3 [security] chore(deps): update peerdependency body-parser to ^1.20.4 [security] Mar 13, 2026
@renovate renovate bot force-pushed the renovate/npm-body-parser-vulnerability branch from d5e43f4 to 208d1d3 Compare March 13, 2026 14:49
@renovate renovate bot changed the title chore(deps): update peerdependency body-parser to ^1.20.4 [security] chore(deps): update peerdependency body-parser to ^1.20.3 [security] Mar 13, 2026
@renovate renovate bot force-pushed the renovate/npm-body-parser-vulnerability branch from 208d1d3 to d2360b8 Compare March 13, 2026 20:51
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants