Skip to content

fix(deps): bump body-parser to resolve qs vulnerability warning#39396

Merged
serhalp merged 1 commit intomasterfrom
fix/39394
Jan 19, 2026
Merged

fix(deps): bump body-parser to resolve qs vulnerability warning#39396
serhalp merged 1 commit intomasterfrom
fix/39394

Conversation

@serhalp
Copy link
Copy Markdown
Member

@serhalp serhalp commented Jan 8, 2026

Description

See GHSA-6rw7-vpxm-498p.

Documentation

N/A

Tests

N/A

Related Issues

Fixes #39394.

@gatsbot gatsbot Bot added the status: triage needed Issue or pull request that need to be triaged and assigned to a reviewer label Jan 8, 2026
"better-opn": "^2.1.1",
"bluebird": "^3.7.2",
"body-parser": "1.20.3",
"body-parser": "^2.2.2",
Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

v2 breaking change is just dropping node <18: https://github.com/expressjs/body-parser/releases. We support 18+ so we're good.

@serhalp serhalp marked this pull request as ready for review January 8, 2026 22:04
@serhalp serhalp requested a review from a team January 8, 2026 22:05
@serhalp serhalp merged commit 2ab2001 into master Jan 19, 2026
74 checks passed
@serhalp serhalp deleted the fix/39394 branch January 19, 2026 17:39
serhalp added a commit that referenced this pull request Jan 22, 2026
…39396)

fix(deps): bump `body-parser` to resolve `qs` vuln

See GHSA-6rw7-vpxm-498p.

Fixes #39394.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

status: triage needed Issue or pull request that need to be triaged and assigned to a reviewer

Projects

None yet

Development

Successfully merging this pull request may close these issues.

CVE-2025-15284 body-parser depedency

2 participants