Product
body-parser
- First Reported
- Oct 22, 2026
- Latest Reported
- Oct 22, 2026
Reported Context (1)
- Servers that accept requests: Express 5 and body-parser 2.x decompress request bodies sent with Content-Encoding: br, and any client can send one. A bare Node.js HTTP server does not decode incoming Brotli bodies on its Node.js Patches Brotli Flaw That Can Enable Remote Code Execution
CVE (1)
MITRE ATT&CK (1)
Vendors (2)
Products (4)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.