express - npm Package Compare versions

Comparing version 4.22.1 to 4.22.2

lib/utils.js

@@ -290,3 +290,4 @@ /*!
   return qs.parse(str, {
-    allowPrototypes: true
+    allowPrototypes: true,
+    arrayLimit: 1000
   });
@@ -293,0 +294,0 @@ }

package.json

 {
   "name": "express",
   "description": "Fast, unopinionated, minimalist web framework",
-  "version": "4.22.1",
+  "version": "4.22.2",
   "author": "TJ Holowaychuk <[e-mail]>",
@@ -37,3 +37,3 @@ "contributors": [
     "array-flatten": "1.1.1",
-    "body-parser": "~1.20.3",
+    "body-parser": "~1.20.5",
     "content-disposition": "~0.5.4",
@@ -57,3 +57,3 @@ "content-type": "~1.0.4",
     "proxy-addr": "~2.0.7",
-    "qs": "~6.14.0",
+    "qs": "~6.15.1",
     "range-parser": "~1.2.1",
@@ -60,0 +60,0 @@ "safe-buffer": "5.2.1",

New alerts

Network access

Supply chain risk

This module accesses the network.

Found 4 instances in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Fixed alerts

Network access

Supply chain risk

This module accesses the network.

Found 4 instances in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

222519

0.34%

Lines of code

3479

0.03%

Dependency changes

• - Removed

  qs@6.14.2
  (transitive)

• Updated

  body-parser@~1.20.5

• Updated

  qs@~6.15.1