body-parser CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH body-parser CVE published 2026-10-23

CVE-2026-111181

A vulnerability in the body-parser npm package can cause a Denial of Service (DoS) via trailing bytes after a compressed request body. Applications using body-parser with default options are vulnerable to a single request that can crash the process. No authentication or matching route is required for this vulnerability. The vulnerability occurs when a request with a 'Content-Encoding' header (e.g., gzip) [truncated]