Skip to main content
← npm

@adonisjs/bodyparser

4 known vulnerabilities (1 critical, 3 high), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
4 · 1 critical, 3 high
Weekly downloads
263K
Dependents
5
Registry
npm

Advisories 4

  • Incomplete fix for CVE-2026-25754 in @adonisjs/bodyparser

    Affected: from 10.1.3, fixed in 10.1.5; from 11.0.0-next.9, fixed in 11.0.3.

  • AdonisJS vulnerable to Denial of Service (DoS) via Unrestricted Memory Buffering in PartHandler during File Type Detection

    Affected: fixed in 10.1.3; from 11.0.0-next.0, fixed in 11.0.0-next.9.

  • AdonisJS multipart body parsing has Prototype Pollution issue

    Affected: fixed in 10.1.3; from 11.0.0-next.0, fixed in 11.0.0-next.9.

  • CVE-2026-21440Critical 9.2

    AdonisJS Path Traversal in Multipart File Handling

    Affected: fixed in 10.1.2; from 11.0.0-next.0, fixed in 11.0.0-next.6.