GHSA-qwcr-r2fm-qrc7
body-parser vulnerable to denial of service when url encoding is enabled
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| npm | body-parser | < 1.20.3 | 1.20.3 |
Details
As written in the advisory (Markdown source, shown as plain text).
### Impact
body-parser <1.20.3 is vulnerable to denial of service when url encoding is enabled. A malicious actor using a specially crafted payload could flood the server with a large number of requests, resulting in denial of service.
### Patches
this issue is patched in 1.20.3
### References
References
External links from the advisory. They lead to third-party sites.