[Snyk] Upgrade body-parser from 1.18.2 to 1.20.3

[devarmenchik1408]

Snyk has created this PR to upgrade body-parser from 1.18.2 to 1.20.3.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 8 versions ahead of your current version.

• The recommended version was released on 2 months ago.

Issues fixed by the recommended upgrade:

	Issue	Score	Exploit Maturity
	Prototype Pollution npm:extend:20180424	646	No Known Exploit
	Prototype Pollution SNYK-JS-AJV-584908	646	No Known Exploit
	Asymmetric Resource Consumption (Amplification) SNYK-JS-BODYPARSER-7926860	646	No Known Exploit
	Prototype Pollution SNYK-JS-LODASH-450202	646	Proof of Concept
	Prototype Pollution SNYK-JS-LODASH-567746	646	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-HAWK-2808852	646	No Known Exploit
	Prototype Pollution SNYK-JS-JSONSCHEMA-1920922	646	No Known Exploit
	Code Injection SNYK-JS-LODASH-1040724	646	Proof of Concept
	Prototype Pollution SNYK-JS-LODASH-608086	646	Proof of Concept
	Prototype Pollution SNYK-JS-LODASH-6139239	646	Proof of Concept
	Prototype Pollution SNYK-JS-LODASH-73638	646	Proof of Concept
	Prototype Poisoning SNYK-JS-QS-3153490	646	Proof of Concept
	Uninitialized Memory Exposure npm:stringstream:20180511	646	Mature
	Cross-site Scripting (XSS) SNYK-JS-COOKIE-8163060	646	No Known Exploit
	Open Redirect SNYK-JS-EXPRESS-6474509	646	No Known Exploit
	Cross-site Scripting SNYK-JS-EXPRESS-7926867	646	No Known Exploit
	Regular Expression Denial of Service (ReDoS) SNYK-JS-LODASH-1018905	646	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-LODASH-73639	646	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-PATHTOREGEXP-7925106	646	Proof of Concept
	Cross-site Scripting SNYK-JS-SEND-7926862	646	No Known Exploit
	Cross-site Scripting SNYK-JS-SERVESTATIC-7926865	646	No Known Exploit
	Authentication Bypass SNYK-JS-HAWK-6969142	646	Proof of Concept
	Prototype Pollution SNYK-JS-MINIMIST-559764	646	Proof of Concept
	Prototype Pollution SNYK-JS-MINIMIST-2429795	646	Proof of Concept

Release notes

Package name: body-parser

• 1.20.3 - 2024-09-09
  

  What's Changed

  Important

  • deps: [email protected]
  • add depth option to customize the depth level in the parser
  • IMPORTANT: The default depth level for parsing URL-encoded data is now 32 (previously was Infinity). Documentation

  Other changes

  • chore: add support for OSSF scorecard reporting by @ inigomarquinez in #522
  • ci: fix errors in ci github action for node 8 and 9 by @ inigomarquinez in #523
  • fix: pin to [email protected] by @ wesleytodd in #527
  • deps: [email protected] by @ melikhov-dev in #521
  • Add OSSF Scorecard badge by @ bjohansebas in #531
  • Linter by @ UlisesGascon in #534
  • Release: 1.20.3 by @ UlisesGascon in #535

  New Contributors

  • @ inigomarquinez made their first contribution in #522
  • @ melikhov-dev made their first contribution in #521
  • @ bjohansebas made their first contribution in #531
  • @ UlisesGascon made their first contribution in #534

  Full Changelog: 1.20.2...1.20.3

• 1.20.2 - 2023-02-22
  
  • Fix strict json error message on Node.js 19+
  • deps: content-type@~1.0.5
    • perf: skip value escaping when unnecessary
  • deps: [email protected]
• 1.20.1 - 2022-10-06
  
  • deps: [email protected]
  • perf: remove unnecessary object clone
• 1.20.0 - 2022-04-03
  
  • Fix error message for json parse whitespace in strict
  • Fix internal error when inflated body exceeds limit
  • Prevent loss of async hooks context
  • Prevent hanging when request already read
  • deps: [email protected]
    • Replace internal eval usage with Function constructor
    • Use instance methods on process to check for listeners
  • deps: [email protected]
    • deps: [email protected]
    • deps: [email protected]
  • deps: [email protected]
  • deps: [email protected]
  • deps: [email protected]
    • deps: [email protected]
• 1.19.2 - 2022-02-16
  
  • deps: [email protected]
  • deps: [email protected]
    • Fix handling of __proto__ keys
  • deps: [email protected]
    • deps: [email protected]
• 1.19.1 - 2021-12-10
• 1.19.0 - 2019-04-26
• 1.18.3 - 2018-05-14
• 1.18.2 - 2017-09-22

from body-parser GitHub release notes

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• This PR was automatically created by Snyk using the credentials of a real user.
• Max score is 1000. Note that the real score may have changed since the PR was raised.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

• 🧐 View latest project report
• 📜 Customise PR templates
• 🛠 Adjust upgrade PR settings
• 🔕 Ignore this dependency or unsubscribe from future upgrade PRs