npm/@adonisjs/bodyparser — 4 CVEs

HIGH8.6CVE-2026-48795@adonisjs/bodyparser has an incomplete fix for CVE-2026-25754

>= 10.1.3, < 10.1.5

HIGH7.5CVE-2026-25762AdonisJS vulnerable to Denial of Service (DoS) via Unrestricted Memory Buffering in PartHandler during File Type Detection

from 0, < 10.1.3

HIGH7.2CVE-2026-25754AdonisJS multipart body parsing has Prototype Pollution issue

from 0, < 10.1.3

—CVE-2026-21440AdonisJS Path Traversal in Multipart File Handling

from 0, < 10.1.2

pkg:npm/@adonisjs/bodyparser