[13] body-parser vulnerable to denial of service when url encoding is enabled #370

New issue

Open

opened 2024-09-23 18:38:06 +01:00 by Helpdesk · 0 comments

Helpdesk commented

2024-09-23 18:38:06 +01:00

Member

Package: body-parser (npm)
Affected versions: < 1.20.3
Patched version: 1.20.3

Impact

body-parser <1.20.3 is vulnerable to denial of service when url encoding is enabled. A malicious actor using a specially crafted payload could flood the server with a large number of requests, resulting in denial of service.

Patches

this issue is patched in 1.20.3

References

Package: body-parser (npm) Affected versions: < 1.20.3 Patched version: 1.20.3 --- ## Impact body-parser <1.20.3 is vulnerable to denial of service when url encoding is enabled. A malicious actor using a specially crafted payload could flood the server with a large number of requests, resulting in denial of service. ## Patches this issue is patched in 1.20.3 ## References