TI-2024-30611 CVE-2024-45590 · GHSA-qwcr-r2fm-qrc7
body-parser vulnerable to denial of service when url encoding is enabled
Priority MEDIUM 40
body-parser is Node.js body parsing middleware.
fast-uri
Records34All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high17CVSS 7.0–8.9
Exploited now
fast-uri records in CISA KEVNo fast-uri vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
2 records in Body-parser · all components
TI-2026-10797 CVE-2026-12590 · GHSA-v422-hmwv-36x6
body-parser vulnerable to denial of service when invalid limit value silently disables size enforcement
Priority LOW 27
Impact: In body-parser versions prior to 1.20.6 (1.x line) and 2.3.0 (2.x line), when the parser is configured with an invalid limit option value such as an unparseable string or NaN, bytes.parse returns null and the req…