Known Vulnerabilities for Body-parser by Openjsf
Listed below are 1 of the newest known vulnerabilities associated with "Body-parser" by "Openjsf".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-90994 json | A flaw was found in sssd, specifically within the PAM (Pluggable Authentication Modules) responder's protocol v1 parser, pam_... | Not Provided | 2026-09-14 | 2026-09-14 |
| CVE-2026-86818 json | fast-uri is a dependency-free RFC 3986 URI parser for Node.js, used by Fastify and ajv, that added a mailto scheme parser in ... | Not Provided | 2026-09-15 | 2026-09-15 |
| CVE-2026-84947 json | undici's dump interceptor reads and discards a response body up to a configurable maximum size. When a response declares a Co... | Not Provided | 2026-09-04 | 2026-09-04 |
| CVE-2026-82562 json | ### Summary When `qs.parse` is called with `comma: true` and `throwOnLimitExceeded: true`, a comma-separated value under a... | Not Provided | 2026-08-30 | 2026-08-31 |
| CVE-2026-82417 json | ### Summary `qs.stringify` throws a `TypeError` when it serializes an object whose own `constructor` property has a truthy... | Not Provided | 2026-08-30 | 2026-08-31 |
| CVE-2026-72860 json | The POST /api/provider-nodes/validate route in 9router takes a caller-supplied baseUrl and issues server-side HTTP requests t... | Not Provided | 2026-08-20 | 2026-08-25 |
| CVE-2026-72084 json | In the Linux kernel, the following vulnerability has been resolved: scsi: target: Bound PR-OUT TransportID parsing to the re... | Not Provided | 2026-08-15 | 2026-08-23 |
| CVE-2026-71236 json | Grocy's API request-body parser (controllers/Api/BaseApiController.php, GetParsedAndFilteredRequestBody) purifies incoming fi... | Not Provided | 2026-08-05 | 2026-08-10 |
| CVE-2026-69243 json | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.2, the HTTP parsers were vulner... | Not Provided | 2026-08-03 | 2026-08-05 |
| CVE-2026-69204 json | Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, Ember HTTP/1.1 does not reject messages contai... | Not Provided | 2026-09-15 | 2026-09-15 |