Generated on Mar 31, 2024 via pnpm

Npm

Home

body-parser 1.12.3

Node.js body parsing middleware

Package summary

issues

licenses

Package created

6 Jan 2014

Version published

16 Apr 2015

Maintainers

Total deps

Direct deps

License

MIT

Issues

2 critical severity issues

critical

bytes@1.0.0

Package has no specified license

Recommendation: Check the package code and files for license information

via: bytes@1.0.0 & others

ms@0.7.0

Package has no specified license

Recommendation: Check the package code and files for license information

via: debug@2.1.3

Collapse

Expand

5 high severity issues

high

qs@2.4.1

Prototype Pollution Protection Bypass in qs

Recommendation: Upgrade to version 6.0.4 or later

via: qs@2.4.1

debug@2.1.3

debug Inefficient Regular Expression Complexity vulnerability

Recommendation: Upgrade to version 2.6.9 or later

via: debug@2.1.3

ms@0.7.0

Regular Expression Denial of Service in ms

Recommendation: Upgrade to version 0.7.1 or later

via: debug@2.1.3

qs@2.4.1

qs vulnerable to Prototype Pollution

Recommendation: Upgrade to version 6.2.4 or later

via: qs@2.4.1

qs@2.4.1

Package uses an invalid SPDX license ("BSD")

Recommendation: Validate that the package complies with your license policy

via: qs@2.4.1

Collapse

Expand

1 moderate severity issue

moderate

ms@0.7.0

Vercel ms Inefficient Regular Expression Complexity vulnerability

Recommendation: Upgrade to version 2.0.0 or later

via: debug@2.1.3

Collapse

Expand

2 low severity issues

low

debug@2.1.3

Regular Expression Denial of Service in debug

Recommendation: Upgrade to version 2.6.9 or later

via: debug@2.1.3

qs@2.4.1

Package uses a license that is not OSI approved ("BSD")

Recommendation: Read and validate the license terms

via: qs@2.4.1

Collapse

Expand

Licenses

MIT License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

Cannot

hold-liable

Must

include-copyright

include-license

12 Packages, Including:

body-parser@1.12.3

content-type@1.0.5

debug@2.1.3

depd@1.0.1

ee-first@1.1.0

iconv-lite@0.4.8

media-typer@0.3.0

mime-db@1.52.0

mime-types@2.1.35

on-finished@2.2.1

raw-body@1.3.4

type-is@1.6.18

N/A

2 Packages, Including:

bytes@1.0.0

ms@0.7.0

BSD

Invalid

Not OSI Approved

1 Packages, Including:

qs@2.4.1

Direct Dependencies

All Dependencies CSV

ⓘ This is a list of body-parser 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.

Name	Version	Size	License	Type	Vulnerabilities
bytes	1.0.0	1.96 kB	UNKNOWN	prod	1
content-type	1.0.5	3.82 kB	MIT	prod
debug	2.1.3	9.92 kB	MIT	prod	1 2 1 1
depd	1.0.1	8.33 kB	MIT	prod
iconv-lite	0.4.8	178.59 kB	MIT	prod
on-finished	2.2.1	3.77 kB	MIT	prod
qs	2.4.1	10.19 kB	BSD	prod	3 1
raw-body	1.3.4	4.82 kB	MIT	prod	1
type-is	1.6.18	5.73 kB	MIT	prod