EUVD-2026-108189

body-parser vulnerable to Denial of Service via trailing bytes after a compressed request body...

body-parser vulnerable to Denial of Service via trailing bytes after a compressed request body

Impact A single request can crash any application using body-parser with default options. When a request carries a Content-Encoding for example gzip, body-parser pipes it into a decompression stream and, after reading the body, leaves that stream piped with no error listener. A payload of one val...

@activepieces/piece-ai (>=0.3.1, <=0.3.4), @appium/base-driver (>=10.0.0-rc.2, <=11.0.0-beta.0) +212 more potentially affected by CVE-2026-111181 via body-parser (>=2.0.2, <=2.3.0)

body-parser NPM version =2.0.2, =0.3.1, =10.0.0-rc.2, =3.2.0, =4.2.0, =1.0.0-beta.0, =8.0.3, =0.3.17, =1.0.0, =2.0.32, =1.4.0, =1.1.1, =1.0.15, =1.0.15, =1.0.1-beta.1, =1.0.18-beta.1 and more Source cves: CVE-2026-111181 Source advisory: GHSA-27R3-JXMH-P828...

PT-2026-122410

Impact A single request can crash any application using body-parser with default options. When a request carries a Content-Encoding for example gzip, body-parser pipes it into a decompression stream and, after reading the body, leaves that stream piped with no error listener. A payload of one val...

Linux Distros Unpatched Vulnerability : CVE-2026-111181

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - body-parser is body parsing middleware for Node.js and Express. In versions before 1.20.9 and in versions from 2.0.0 before 2.4.0, a single request can crash an...

CVE-2026-111181

A flaw was found in body-parser. A remote, unauthenticated attacker can cause a Denial of Service DoS by sending a specially crafted HTTP request with compressed content containing unexpected trailing data. Because the application fails to handle decompression stream errors after processing the...

@activepieces/piece-ai (>=0.3.1, <=0.3.4), @appium/base-driver (>=10.0.0-rc.2, <=11.0.0-beta.0) +212 more potentially affected by CVE-2026-111181 via body-parser (>=2.0.2, <=2.3.0)

body-parser NPM version =2.0.2, =0.3.1, =10.0.0-rc.2, =3.2.0, =4.2.0, =1.0.0-beta.0, =8.0.3, =0.3.17, =1.0.0, =2.0.32, =1.4.0, =1.1.1, =1.0.15, =1.0.15, =1.0.1-beta.1, =1.0.18-beta.1 and more Source cves: CVE-2026-111181 Source advisory: SNYK:JS-BODYPARSER-21431495...

01-numacert (>=1.0.0, <=3.0.0), 10by10-react-app (1.2.1) +19014 more potentially affected by CVE-2026-111181 via body-parser (>=1.0.0, <=1.20.8)

body-parser NPM version =1.0.0, =1.0.0, =0.2.0, =1.0.2, =2.0.0, =0.2.0, =0.0.978, =0.2.0, =0.0.1, =0.2.0 and more Source cves: CVE-2026-111181 Source advisory: SNYK:JS-BODYPARSER-21431495...

Uncaught Exception

Overview Affected versions of this package are vulnerable to Uncaught Exception via the read function in lib/read.js when processing a compressed request body that contains trailing bytes. An attacker can send a compressed body with trailing data, causing the decompression stream to emit an error...

Uncaught Exception

Overview Affected versions of this package are vulnerable to Uncaught Exception via the read function in lib/read.js when processing a compressed request body that contains trailing bytes. An attacker can send a compressed body with trailing data, causing the decompression stream to emit an error...

AZL-111059 CVE-2026-111181 affecting package python-tensorboard 2.16.2-6

body-parser is body parsing middleware for Node.js and Express. In versions before 1.20.9 and in versions from 2.0.0 before 2.4.0, a single request can crash any application using body-parser with default options. When a request carries a Content-Encoding such as gzip, body-parser pipes it into a...

CVE-2026-111181

body-parser is body parsing middleware for Node.js and Express. In versions before 1.20.9 and in versions from 2.0.0 before 2.4.0, a single request can crash any application using body-parser with default options. When a request carries a Content-Encoding such as gzip, body-parser pipes it into a...

AZL-110999 CVE-2026-111181 affecting package js-jquery 3.5.0-4

body-parser is body parsing middleware for Node.js and Express. In versions before 1.20.9 and in versions from 2.0.0 before 2.4.0, a single request can crash any application using body-parser with default options. When a request carries a Content-Encoding such as gzip, body-parser pipes it into a...

DEBIAN-CVE-2026-111181

body-parser is body parsing middleware for Node.js and Express. In versions before 1.20.9 and in versions from 2.0.0 before 2.4.0, a single request can crash any application using body-parser with default options. When a request carries a Content-Encoding such as gzip, body-parser pipes it into a...

CVE-2026-111181

body-parser is body parsing middleware for Node.js and Express. In versions before 1.20.9 and in versions from 2.0.0 before 2.4.0, a single request can crash any application using body-parser with default options. When a request carries a Content-Encoding such as gzip, body-parser pipes it into a...

CVE-2026-111181 body-parser vulnerable to Denial of Service via trailing bytes after a compressed request body

body-parser is body parsing middleware for Node.js and Express. In versions before 1.20.9 and in versions from 2.0.0 before 2.4.0, a single request can crash any application using body-parser with default options. When a request carries a Content-Encoding such as gzip, body-parser pipes it into a...

@activepieces/piece-ai (>=0.3.1, <=0.3.4), @appium/base-driver (>=10.0.0-rc.2, <=11.0.0-beta.0) +212 more potentially affected by CVE-2026-111181 via body-parser (>=2.0.2, <=2.3.0)

body-parser NPM version =2.0.2, =0.3.1, =10.0.0-rc.2, =3.2.0, =4.2.0, =1.0.0-beta.0, =8.0.3, =0.3.17, =1.0.0, =2.0.32, =1.4.0, =1.1.1, =1.0.15, =1.0.15, =1.0.1-beta.1, =1.0.18-beta.1 and more Source cves: CVE-2026-111181 Source advisory: MEND:CVE-2026-111181...

CVE-2026-111181

body-parser is body parsing middleware for Node.js and Express. In versions before 1.20.9 and in versions from 2.0.0 before 2.4.0, a single request can crash any application using body-parser with default options. When a request carries a Content-Encoding such as gzip, body-parser pipes it into a...

CVE-2026-111181 body-parser vulnerable to Denial of Service via trailing bytes after a compressed request body

body-parser is body parsing middleware for Node.js and Express. In versions before 1.20.9 and in versions from 2.0.0 before 2.4.0, a single request can crash any application using body-parser with default options. When a request carries a Content-Encoding such as gzip, body-parser pipes it into a...

01-numacert (>=1.0.0, <=3.0.0), 10by10-react-app (1.2.1) +18685 more potentially affected by CVE-2026-111181 via body-parser (>=1.4.1, <=1.20.8)

body-parser NPM version =1.4.1, =1.0.0, =0.2.0, =1.0.2, =2.0.0, =0.2.0, =0.0.978, =0.0.1, =0.0.28, =0.0.36 - 4design 0.0.1 and more Source cves: CVE-2026-111181 Source advisory: MEND:CVE-2026-111181...