CVE-2026-48795
1 advisory.
npm/@adonisjs/bodyparser CVE-2026-48795: high 8.6, EPSS 0.55%
@adonisjs/bodyparser has an incomplete fix for CVE-2026-25754
Action: Upgrade @adonisjs/bodyparser to 10.1.5 or later.
npm i @adonisjs/bodyparser@10.1.5npm i @adonisjs/bodyparser@11.0.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 10.1.3 | 10.1.5 | - |
| 11.0.0-next.9 | 11.0.3 | - |
Fixed versions
| 10.1.5 | 11.0.3 |
Sources
- osv: GHSA-qcm7-3vpr-hj5h
- https://github.com/adonisjs/core/security/advisories/GHSA-f5x2-vj4h-vg4c
- https://github.com/adonisjs/core/security/advisories/GHSA-qcm7-3vpr-hj5h
- https://github.com/adonisjs/bodyparser/commit/40e1c71f958cffb74f6b91bed6630dca979062ed
- https://github.com/adonisjs/bodyparser/releases/tag/v10.1.5
- https://github.com/adonisjs/bodyparser/releases/tag/v11.0.3
- https://github.com/adonisjs/core
CVE-2026-48795 · published · modified · JSON