CVE-2024-45590

CVE-2024-45590 — body-parser (Node.js) Affected: body-parser versions prior to 1.20.3 (Node.js body parsing middleware). Issue: Denial of Service via URL encoding when enabled; a crafted payload can cause the server to handle a flood of requests. Impact: Denial of service (availability impact rep...

CVE-2026-12590

The Red Hat and CVE records confirm a vulnerability in body-parser: when the parser is configured with an invalid limit option (e.g., unparseable string or NaN), the request body size check is silently bypassed, enabling potential DoS through unbounded payloads. Affected versions are body-parser ...