VYPR
← All advisories
High severityNVD Advisory· Published Sep 10, 2024· Updated Sep 10, 2024

body-parser vulnerable to denial of service when url encoding is enabled

CVE-2024-45590

Description

body-parser is Node.js body parsing middleware. body-parser <1.20.3 is vulnerable to denial of service when url encoding is enabled. A malicious actor using a specially crafted payload could flood the server with a large number of requests, resulting in denial of service. This issue is patched in 1.20.3.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
body-parsernpm
< 1.20.31.20.3

Affected products

48

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.