Update dependency body-parser to ~1.20.0 #5

mend-for-github-com · 2022-07-06T02:14:06Z

This PR contains the following updates:

Package	Type	Update	Change
body-parser	dependencies	minor	`~1.17.1` -> `~1.20.0`

By merging this PR, the below vulnerabilities will be automatically resolved:

Severity	CVSS Score	CVE
High	7.5	CVE-2022-24999
High	7.5	CVE-2024-45590
Low	3.7	CVE-2017-16137
Low	3.5	CVE-2017-20165

Release Notes

expressjs/body-parser (body-parser)

`v1.20.3`

Compare Source

===================

deps: [email protected]
add depth option to customize the depth level in the parser
IMPORTANT: The default depth level for parsing URL-encoded data is now 32 (previously was Infinity)

`v1.20.2`

Compare Source

===================

Fix strict json error message on Node.js 19+
deps: content-type@~1.0.5
- perf: skip value escaping when unnecessary
deps: [email protected]

`v1.20.1`

Compare Source

===================

deps: [email protected]
perf: remove unnecessary object clone

`v1.20.0`

Compare Source

===================

Fix error message for json parse whitespace in strict
Fix internal error when inflated body exceeds limit
Prevent loss of async hooks context
Prevent hanging when request already read
deps: [email protected]
- Replace internal eval usage with Function constructor
- Use instance methods on process to check for listeners
deps: [email protected]
- deps: [email protected]
- deps: [email protected]
deps: [email protected]
deps: [email protected]
deps: [email protected]
- deps: [email protected]

`v1.19.2`

Compare Source

===================

deps: [email protected]
deps: [email protected]
- Fix handling of __proto__ keys
deps: [email protected]
- deps: [email protected]

`v1.19.1`

Compare Source

===================

deps: [email protected]
deps: [email protected]
- deps: [email protected]
- deps: [email protected]
- deps: [email protected]
deps: [email protected]
deps: [email protected]
- deps: [email protected]
- deps: [email protected]
deps: [email protected]
deps: type-is@~1.6.18

`v1.19.0`

Compare Source

===================

deps: [email protected]
- Add petabyte (pb) support
deps: [email protected]
- Set constructor name when possible
- deps: [email protected]
- deps: statuses@'>= 1.5.0 < 2'
deps: [email protected]
- Added encoding MIK
deps: [email protected]
- Fix parsing array brackets after index
deps: [email protected]
- deps: [email protected]
- deps: [email protected]
- deps: [email protected]
deps: type-is@~1.6.17
- deps: mime-types@~2.1.24
- perf: prevent internal throw on invalid type

`v1.18.3`

Compare Source

===================

Fix stack trace for strict json parse error
deps: depd@~1.1.2
- perf: remove argument reassignment
deps: http-errors@~1.6.3
- deps: depd@~1.1.2
- deps: [email protected]
- deps: statuses@'>= 1.3.1 < 2'
deps: [email protected]
- Fix loading encoding with year appended
- Fix deprecation warnings on Node.js 10+
deps: [email protected]
deps: [email protected]
- deps: [email protected]
- deps: [email protected]
deps: type-is@~1.6.16
- deps: mime-types@~2.1.18

`v1.18.2`

Compare Source

===================

deps: [email protected]
perf: remove argument reassignment

`v1.18.1`

Compare Source

===================

deps: content-type@~1.0.4
- perf: remove argument reassignment
- perf: skip parameter parsing when no parameters
deps: [email protected]
- Fix ISO-8859-1 regression
- Update Windows-1255
deps: [email protected]
- Fix parsing & compacting very deep objects
deps: [email protected]
- deps: [email protected]

`v1.18.0`

Compare Source

===================

Fix JSON strict violation error to match native parse error
Include the body property on verify errors
Include the type property on all generated errors
Use http-errors to set status code on errors
deps: [email protected]
deps: [email protected]
deps: depd@~1.1.1
- Remove unnecessary Buffer loading
deps: http-errors@~1.6.2
- deps: [email protected]
deps: [email protected]
- Add support for React Native
- Add a warning if not loaded as utf-8
- Fix CESU-8 decoding in Node.js 8
- Improve speed of ISO-8859-1 encoding
deps: [email protected]
deps: [email protected]
- Use http-errors for standard emitted errors
- deps: [email protected]
- deps: [email protected]
- perf: skip buffer decoding on overage chunk
perf: prevent internal throw when missing charset

If you want to rebase/retry this PR, check this box

mend-for-github-com bot added the security fix Security fix generated by Mend label Jul 6, 2022

mend-for-github-com bot force-pushed the whitesource-remediate/body-parser-1.x branch 6 times, most recently from 0e26427 to 0ffc9e7 Compare November 17, 2022 11:59

mend-for-github-com bot force-pushed the whitesource-remediate/body-parser-1.x branch 5 times, most recently from 543c151 to 1546468 Compare November 25, 2022 13:03

mend-for-github-com bot force-pushed the whitesource-remediate/body-parser-1.x branch 6 times, most recently from 5c212a0 to 4d924df Compare December 1, 2022 13:59

mend-for-github-com bot force-pushed the whitesource-remediate/body-parser-1.x branch 2 times, most recently from df3b206 to 0ec4a83 Compare December 3, 2022 16:17

mend-for-github-com bot force-pushed the whitesource-remediate/body-parser-1.x branch 9 times, most recently from 36a283c to caf27d6 Compare December 22, 2022 10:06

mend-for-github-com bot force-pushed the whitesource-remediate/body-parser-1.x branch from caf27d6 to a3eaee2 Compare December 25, 2022 00:36

mend-for-github-com bot force-pushed the whitesource-remediate/body-parser-1.x branch 7 times, most recently from 070874e to c425c9b Compare January 13, 2023 06:23

mend-for-github-com bot force-pushed the whitesource-remediate/body-parser-1.x branch 4 times, most recently from 79f10f9 to a1ce39d Compare January 20, 2023 15:54

mend-for-github-com bot changed the title ~~Update dependency body-parser to ~1.18.0~~ Update dependency body-parser to ~1.18.0 - autoclosed Mar 27, 2023

mend-for-github-com bot closed this Mar 27, 2023

mend-for-github-com bot deleted the whitesource-remediate/body-parser-1.x branch March 27, 2023 19:20

mend-for-github-com bot changed the title ~~Update dependency body-parser to ~1.18.0 - autoclosed~~ Update dependency body-parser to ~1.18.0 Mar 31, 2023

mend-for-github-com bot reopened this Mar 31, 2023

mend-for-github-com bot restored the whitesource-remediate/body-parser-1.x branch March 31, 2023 04:50

mend-for-github-com bot changed the title ~~Update dependency body-parser to ~1.18.0~~ Update dependency body-parser to ~1.18.0 - autoclosed Jun 14, 2023

mend-for-github-com bot closed this Jun 14, 2023

mend-for-github-com bot deleted the whitesource-remediate/body-parser-1.x branch June 14, 2023 21:23

mend-for-github-com bot changed the title ~~Update dependency body-parser to ~1.18.0 - autoclosed~~ Update dependency body-parser to ~1.18.0 Jun 19, 2023

mend-for-github-com bot reopened this Jun 19, 2023

mend-for-github-com bot restored the whitesource-remediate/body-parser-1.x branch June 19, 2023 20:37

mend-for-github-com bot force-pushed the whitesource-remediate/body-parser-1.x branch from a1ce39d to ac853fe Compare June 19, 2023 20:37

mend-for-github-com bot force-pushed the whitesource-remediate/body-parser-1.x branch from ac853fe to ae19e8e Compare July 4, 2023 20:04

mend-for-github-com bot changed the title ~~Update dependency body-parser to ~1.18.0~~ Update dependency body-parser to ~1.19.0 Aug 29, 2023

mend-for-github-com bot force-pushed the whitesource-remediate/body-parser-1.x branch from ae19e8e to 3dad212 Compare August 29, 2023 04:56

Update dependency body-parser to ~1.20.0

398b78e

mend-for-github-com bot force-pushed the whitesource-remediate/body-parser-1.x branch from 3dad212 to 398b78e Compare September 19, 2024 00:06

mend-for-github-com bot changed the title ~~Update dependency body-parser to ~1.19.0~~ Update dependency body-parser to ~1.20.0 Sep 19, 2024

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Update dependency body-parser to ~1.20.0 #5

Update dependency body-parser to ~1.20.0 #5

mend-for-github-com bot commented Jul 6, 2022 •

edited

Loading

Update dependency body-parser to ~1.20.0 #5

Are you sure you want to change the base?

Update dependency body-parser to ~1.20.0 #5

Conversation

mend-for-github-com bot commented Jul 6, 2022 • edited Loading

Release Notes

mend-for-github-com bot commented Jul 6, 2022 •

edited

Loading