PT-2026-56769

🗓️ 09 Jul 2026 00:00:00Reported by Positive TechnologiesType

Invalid limit values in body-parser may skip size checks, risking denial of service; fixed in 1.20.6 and 2.3.0.

Reporter	Title	Published	Views	Family All 277
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affects IBM Db2 Big SQL on IBM Software Hub	10 Sep 202610:50	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple secuirty vulnerabilies addressed with IBM Business Automation Workflow August 2026	1 Sep 202618:42	–	ibm
IBM Security Bulletins	Security Bulletin: Maximo AI Service uses multiple third party dependencies which are vulnerable to multiple CVEs.	27 Aug 202619:18	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Quantum Safe Explorer is affected by multiple vulnerabilities	28 Sep 202606:43	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities affect IBM Decision Optimization for Cloud Pak for Data.	28 Sep 202608:43	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - Monitor Component uses multiple dependencies which are vulnerable to multiple CVEs.	30 Jul 202615:33	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM Db2® on Cloud Pak for Data, and Db2 Warehouse on Cloud Pak for Data.	7 Sep 202611:00	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for August 2026.	1 Sep 202618:47	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities addressed in IBM SevOne Network Performance Management for August 2026	8 Sep 202618:26	–	ibm
attackerkb	CVE-2026-12590	9 Jul 202610:21	–	attackerkb

Source	Link
github	www.github.com/expressjs/body-parser/security/advisories/GHSA-v422-hmwv-36x6
osv	www.osv.dev/vulnerability/GHSA-v422-hmwv-36x6
github	www.github.com/expressjs/body-parser/commit/2322e111cc321413ec2b7b76d01be533d3de9d7d
osv	www.osv.dev/vulnerability/CVE-2026-12590
github	www.github.com/expressjs/body-parser/commit/3492672eee593d5c158f239b6e9115498a5dbeac
github	www.github.com/expressjs/body-parser/pull/741
github	www.github.com/expressjs/body-parser/pull/698
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-12590
github	www.github.com/CVEProject/cvelistV5/tree/main/cves/2026/12xxx/CVE-2026-12590.json
github	www.github.com/expressjs/body-parser/releases/tag/v2.3.0

20 Jul 2026 00:00Current

6.1Medium risk

Vulners AI Score6.1

CVSS 3.13.7 - 5.9

EPSS0.00412

SSVC