CVE-2026-12590

🗓️ 09 Jul 2026 11:16:24Reported by [email protected]Type

Invalid limit values in body-parser may disable size checks before fix, risking a denial of service; fixed by throwing errors.

Reporter	Title	Published	Views	Family All 277
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affects IBM Db2 Big SQL on IBM Software Hub	10 Sep 202610:50	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple secuirty vulnerabilies addressed with IBM Business Automation Workflow August 2026	1 Sep 202618:42	–	ibm
IBM Security Bulletins	Security Bulletin: Maximo AI Service uses multiple third party dependencies which are vulnerable to multiple CVEs.	27 Aug 202619:18	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Quantum Safe Explorer is affected by multiple vulnerabilities	28 Sep 202606:43	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities affect IBM Decision Optimization for Cloud Pak for Data.	28 Sep 202608:43	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - Monitor Component uses multiple dependencies which are vulnerable to multiple CVEs.	30 Jul 202615:33	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM Db2® on Cloud Pak for Data, and Db2 Warehouse on Cloud Pak for Data.	7 Sep 202611:00	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for August 2026.	1 Sep 202618:47	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities addressed in IBM SevOne Network Performance Management for August 2026	8 Sep 202618:26	–	ibm
attackerkb	CVE-2026-12590	9 Jul 202610:21	–	attackerkb

NVD

Node

openjsf body-parserRange<1.20.6node.js

openjsf body-parserRange2.0.0–2.3.0node.js

Source	Link
github	www.github.com/expressjs/body-parser/security/advisories/GHSA-v422-hmwv-36x6
cna	www.cna.openjsf.org/security-advisories.html

10 Jul 2026 02:45Current

CVSS 3.13.7 - 5.9

EPSS0.00412

SSVC