Known vulnerabilities in body-parser

Vendor: Express.js
Software: body-parser
Software CPE: cpe:2.3:a:expressjs:body-parser:*:*:*:*:*:*:*:*
Total vulnerabilities: 3
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting body-parser body-parser is affected by 3 known vulnerabilities: 2 medium, 1 low Critical High Medium Low

Vulnerabilities (3)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU137284 - Allocation of Resources Without Limits or Throttling
CVE-2026-12590
CWE-770 Low
No
No
1.20.6, 2.3.0 09.07.2026 SB2026070953
#VU118753 - Resource exhaustion
CVE-2025-13466
CWE-400 Medium
No
No
2.2.1 25.11.2025 SB2025112551
SB2026012034
SB2026022521
and 2 more
#VU97208 - Asymmetric Resource Consumption (Amplification)
CVE-2024-45590
CWE-405 Medium
Available
No
1.20.3 12.09.2024 SB2024091249
SB2024091251
SB2024091252
and 59 more