CVE-2026-111181 | expressjs body-parser up to 1.20.8/2.3.x Decompression denial of service (EUVD-2026-108189)

October 22, 2026 Yanac

A vulnerability, which was classified as problematic, was found in expressjs body-parser up to 1.20.8/2.3.x. This issue affects some unknown processing of the component Decompression. Executing a manipulation can lead to denial of service.

This vulnerability appears as CVE-2026-111181. The attack may be performed from remote. There is no available exploit.

You should upgrade the affected component.VulDB Recent EntriesRead More