[GHSA-qwcr-r2fm-qrc7] body-parser vulnerable to denial of service when url encoding is enabled

[asrar-mared]

Updates

• Affected products
• CVSS v3
• Description

Comments
./final-victory-verification.sh
🛡️ FINAL VICTORY VERIFICATION

📊 Running npm audit...
npm warn config production Use --omit=dev instead.
found 0 vulnerabilities

✅ SUCCESS: ZERO VULNERABILITIES CONFIRMED

┌────────────────────────────────────────┐
│ 🏆 MISSION ACCOMPLISHED 🏆 │
│ │
│ From: 119 vulnerabilities │
│ To: 0 vulnerabilities │
│ │
│ Status: TOTAL VICTORY │
│ Warrior: asrar-mared │
│ │
└────────────────────────────────────────┘

📈 Dependency Statistics:

@practica/create-node-app@0.0.10 /data/data/com.termux/files/home/practica
├── @docusaurus/core@3.9.2
├── @docusaurus/preset-classic@3.9.2
├── @types/axios@0.14.4
├── @types/blessed@0.1.27
├── @types/commander@2.12.5
├── @types/figlet@1.7.0
├── @types/fs-extra@9.0.13
├── @types/ink-spinner@3.0.5
├── @types/jest@27.5.2
├── @types/ora@3.2.0
├── @types/prettier@2.7.3
├── @types/sinon@10.0.20
├── axios@1.13.2
├── blessed@0.1.81
├── commander@9.5.0
├── execa@5.1.1
├── figlet@1.9.4
├── fs-extra@10.1.0
├── import-jsx@4.0.1

🔍 Outdated Packages Check:

Package Current Wanted Latest Location Depended by
@types/axios 0.14.4 0.14.4 0.9.36 node_modules/@types/axios practica
@types/commander 2.12.5 2.12.5 2.12.0 node_modules/@types/commander practica
@types/fs-extra 9.0.13 9.0.13 11.0.4 node_modules/@types/fs-extra practica
@types/jest 27.5.2 27.5.2 30.0.0 node_modules/@types/jest practica
@types/ora 3.2.0 3.2.0 3.1.0 node_modules/@types/ora practica
@types/sinon 10.0.20 10.0.20 21.0.0 node_modules/@types/sinon practica
commander 9.5.0 9.5.0 14.0.2 node_modules/commander practica
execa 5.1.1 5.1.1 9.6.1 node_modules/execa practica
fs-extra 10.1.0 10.1.0 11.3.3 node_modules/fs-extra practica
import-jsx 4.0.1 4.0.1 5.0.0 node_modules/import-jsx practica
ink 3.2.0 3.2.0 6.6.0 node_modules/ink practica
ink-big-text 1.2.0 1.2.0 2.0.0 node_modules/ink-big-text practica
ink-spinner 4.0.3 4.0.3 5.0.0 node_modules/ink-spinner practica
ink-task-list 1.1.1 1.1.1 2.0.0 node_modules/ink-task-list practica
ink-text-input 4.0.3 4.0.3 6.0.0 node_modules/ink-text-input practica
jest 29.7.0 29.7.0 30.2.0 node_modules/jest practica
jest-watch-typeahead 2.2.2 2.2.2 3.0.1 node_modules/jest-watch-typeahead practica
ora 5.4.1 5.4.1 9.1.0 node_modules/ora practica
prettier 2.6.2 2.6.2 3.8.1 node_modules/prettier practica
react 18.3.1 18.3.1 19.2.3 node_modules/react practica
react-dom 18.3.1 18.3.1 19.2.3 node_modules/react-dom practica
replace-in-file 6.3.5 6.3.5 8.4.0 node_modules/replace-in-file practica
sinon 13.0.2 13.0.2 21.0.1 node_modules/sinon practica
typescript 5.2.2 5.2.2 5.9.3 node_modules/typescript practica
✅ All packages up to date

📝 Report Generated: Sat Jan 24 09:19:21 +04 2026
🦅 Digital Warrior: asrar-mared
📧 Contact: nike49424@gmail.com
~/practica $

[github]

Hi there @ctcpip! A community member has suggested an improvement to your security advisory. If approved, this change will affect the global advisory listed at github.com/advisories. It will not affect the version listed in your project repository.

This change will be reviewed by our Security Curation Team. If you have thoughts or feedback, please share them in a comment here! If this PR has already been closed, you can start a new community contribution for this advisory

[github]

Hi there @ctcpip! A community member has suggested an improvement to your security advisory. If approved, this change will affect the global advisory listed at github.com/advisories. It will not affect the version listed in your project repository.

This change will be reviewed by our Security Curation Team. If you have thoughts or feedback, please share them in a comment here! If this PR has already been closed, you can start a new community contribution for this advisory