[Snyk] Upgrade body-parser from 1.19.1 to 1.20.1

[snyk-bot]

Snyk has created this PR to upgrade body-parser from 1.19.1 to 1.20.1.

:information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 3 versions ahead of your current version.
• The recommended version was released 5 months ago, on 2022-10-06.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Prototype Poisoning SNYK-JS-QS-3153490	696/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.5	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: body-parser

• 1.20.1 - 2022-10-06
  • deps: [email protected]
  • perf: remove unnecessary object clone
• 1.20.0 - 2022-04-03
  • Fix error message for json parse whitespace in strict
  • Fix internal error when inflated body exceeds limit
  • Prevent loss of async hooks context
  • Prevent hanging when request already read
  • deps: [email protected]
    • Replace internal eval usage with Function constructor
    • Use instance methods on process to check for listeners
  • deps: [email protected]
    • deps: [email protected]
    • deps: [email protected]
  • deps: [email protected]
  • deps: [email protected]
  • deps: [email protected]
    • deps: [email protected]
• 1.19.2 - 2022-02-16
  • deps: [email protected]
  • deps: [email protected]
    • Fix handling of __proto__ keys
  • deps: [email protected]
    • deps: [email protected]
• 1.19.1 - 2021-12-10
  • deps: [email protected]
  • deps: [email protected]
    • deps: [email protected]
    • deps: [email protected]
    • deps: [email protected]
  • deps: [email protected]
  • deps: [email protected]
    • deps: [email protected]
    • deps: [email protected]
  • deps: [email protected]
  • deps: type-is@~1.6.18

from body-parser GitHub release notes

Commit messages

Package name: body-parser

• 830bdfb 1.20.1
• ecad1cc build: [email protected]
• 03b93cf build: [email protected]
• 2c611fc build: [email protected]
• f199e94 perf: remove unnecessary object clone
• 0123e12 build: [email protected]
• de1e6c2 build: [email protected]
• 477ff13 build: [email protected]
• 40c3fff deps: [email protected]
• 4aa84b7 build: [email protected]
• b274dd9 build: [email protected]
• eb6dd96 build: [email protected]
• fe2f823 docs: fix typo in readme
• 7013c29 build: [email protected]
• 9d02699 build: [email protected]
• b89bdc7 build: [email protected]
• 44ffa97 build: [email protected]
• 633a78a build: [email protected]
• 0936f44 build: [email protected]
• 3d9269e build: support Node.js 18.x
• 1f6f58e 1.20.0
• 7861a00 docs: update CI badge link
• 601a076 docs: add security policy
• 77bcc0e deps: [email protected]

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs