What is CVE-2026-12590?

CVE-2026-12590 is a low-severity vulnerability in Body-parser, classified under Allocation of Resources Without Limits or Throttling. CVSS score: 3.7/10. Published 2026-07-09.

How severe is CVE-2026-12590?

Low severity. CVSS v3 base score is 3.7 out of 10.

Resource exhaustion in Body-parser

CVE-2026-12590

Impact: In body-parser versions prior to 1.20.6 (1.x line) and 2.3.0 (2.x line), when the parser is configured with an invalid limit option value such as an unparseable string or NaN, bytes.parse returns null and the request body size chec…

CVSS v3 metric

CVSS v3 base score 3.7 (Low). Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L.

Affected products

Body-parser — versions 0, 1.20.6, 2.0.0

Weakness classification (CWE)

CWE-770 — Allocation of Resources Without Limits or Throttling

References

ce714d77-add3-4f53-aff5-83d477b104bb
ce714d77-add3-4f53-aff5-83d477b104bb

Frequently asked questions

What is CVE-2026-12590?: CVE-2026-12590 is a low-severity vulnerability in Body-parser, classified under Allocation of Resources Without Limits or Throttling. CVSS score: 3.7/10. Published 2026-07-09.
How severe is CVE-2026-12590?: Low severity. CVSS v3 base score is 3.7 out of 10.