Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
ulisesgascon/body-parser can let attackers run code
published 15 days ago
Summary
The body-parser component used in your applications may allow specially crafted data to execute unintended actions on the server. This creates a risk that a malicious user could take control or disrupt the service. Update to the latest version (1.18.2‑tuxcare.1) as soon as possible to close the gap.
What to do
- Update ulisesgascon body-parser to version 1.18.2-tuxcare.1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:npm | ulisesgascon | body-parser |
>= 1.18.2-tuxcare.0, < 1.18.2-tuxcare.1 Fix: upgrade to 1.18.2-tuxcare.1
|
Original advisory text
TuxCare security update for body-parser (1 CVE)
TuxCare rebuilt body-parser to address 1 CVE. Fixed in 1.18.2-tuxcare.1.
Timeline
Published20 Oct 2026
Updated21 Oct 2026
First seen21 Oct 2026
Sources
CLSA-2026-1792476566 · OSV
Track software like this
Free during beta