Comparing express@4.21.2...express@4.22.0 • npm-diff.app 📦🔃

Comparing
`express@4.21.2`

...

express@4.22.0

Options

files: **/!(*.map|*.min.js)

Bundlephobia

Size

Gzip

Dependencies

Packagephobia

216.0 kB

2.1 MB

Publish

Install

216.3 kB (+299 B)

2.2 MB (+161.1 kB)

Packagephobia

Publish

Install

Showing 3 changed files with 24 additions and 18 deletions

+++0---0

Showing 3 changed files with 24 additions and 18 deletions

Split Unified

lib/utils.js +++1---1

View file

package.json +++17---17

View file

History.md +++6---0

View file

 function parseExtendedQueryString(str) {
   return qs.parse(str, {
+    allowPrototypes: true
+    plainObjects: true
   });
+}

+{
   "name": "express",
   "description": "Fast, unopinionated, minimalist web framework",
+  "version": "4.21.2",
+  "version": "4.22.0",
   "author": "TJ Holowaychuk <tj@vision-media.ca>",
   "contributors": [
     "Aaron Heckmann <aaron.heckmann+github@gmail.com>",
   "dependencies": {
     "accepts": "~1.3.8",
     "array-flatten": "1.1.1",
+    "body-parser": "1.20.3",
+    "content-disposition": "0.5.4",
+    "body-parser": "~1.20.3",
+    "content-disposition": "~0.5.4",
     "content-type": "~1.0.4",
+    "cookie": "0.7.1",
+    "cookie-signature": "1.0.6",
+    "cookie": "~0.7.1",
+    "cookie-signature": "~1.0.6",
     "debug": "2.6.9",
     "depd": "2.0.0",
     "encodeurl": "~2.0.0",
     "escape-html": "~1.0.3",
     "etag": "~1.8.1",
+    "finalhandler": "1.3.1",
+    "fresh": "0.5.2",
+    "http-errors": "2.0.0",
+    "finalhandler": "~1.3.1",
+    "fresh": "~0.5.2",
+    "http-errors": "~2.0.0",
     "merge-descriptors": "1.0.3",
     "methods": "~1.1.2",
+    "on-finished": "2.4.1",
+    "on-finished": "~2.4.1",
     "parseurl": "~1.3.3",
+    "path-to-regexp": "0.1.12",
+    "path-to-regexp": "~0.1.12",
     "proxy-addr": "~2.0.7",
+    "qs": "6.13.0",
+    "qs": "~6.14.0",
     "range-parser": "~1.2.1",
     "safe-buffer": "5.2.1",
+    "send": "0.19.0",
+    "serve-static": "1.16.2",
+    "send": "~0.19.0",
+    "serve-static": "~1.16.2",
     "setprototypeof": "1.2.0",
+    "statuses": "2.0.1",
+    "statuses": "~2.0.1",
     "type-is": "~1.6.18",
     "utils-merge": "1.0.1",
     "vary": "~1.1.2"
     "hbs": "4.2.0",
     "marked": "0.7.0",
     "method-override": "3.0.0",
+    "mocha": "10.2.0",
+    "mocha": "^6.2.2",
     "morgan": "1.10.0",
+    "nyc": "15.1.0",
+    "nyc": "^14.1.1",
     "pbkdf2-password": "1.2.1",
+    "supertest": "6.3.0",
+    "supertest": "^6.1.6",
     "vhost": "~3.0.2"
   },
   "engines": {

+.22.0 / 2025-12-01
+==========
+  * Security fix for [CVE-2024-51999](https://www.cve.org/CVERecord?id=CVE-2024-51999) ([GHSA-pj86-cfqh-vqx6](https://github.com/expressjs/express/security/advisories/GHSA-pj86-cfqh-vqx6))
+  * deps: use tilde notation for dependencies
+  * deps: qs@6.14.0
 .21.2 / 2024-11-06
 ==========

 function parseExtendedQueryString(str) {
   return qs.parse(str, {
+    allowPrototypes: true
+    plainObjects: true
   });
+}

+{
   "name": "express",
   "description": "Fast, unopinionated, minimalist web framework",
+  "version": "4.21.2",
+  "version": "4.22.0",
   "author": "TJ Holowaychuk <tj@vision-media.ca>",
   "contributors": [
     "Aaron Heckmann <aaron.heckmann+github@gmail.com>",
   "dependencies": {
     "accepts": "~1.3.8",
     "array-flatten": "1.1.1",
+    "body-parser": "1.20.3",
+    "content-disposition": "0.5.4",
+    "body-parser": "~1.20.3",
+    "content-disposition": "~0.5.4",
     "content-type": "~1.0.4",
+    "cookie": "0.7.1",
+    "cookie-signature": "1.0.6",
+    "cookie": "~0.7.1",
+    "cookie-signature": "~1.0.6",
     "debug": "2.6.9",
     "depd": "2.0.0",
     "encodeurl": "~2.0.0",
     "escape-html": "~1.0.3",
     "etag": "~1.8.1",
+    "finalhandler": "1.3.1",
+    "fresh": "0.5.2",
+    "http-errors": "2.0.0",
+    "finalhandler": "~1.3.1",
+    "fresh": "~0.5.2",
+    "http-errors": "~2.0.0",
     "merge-descriptors": "1.0.3",
     "methods": "~1.1.2",
+    "on-finished": "2.4.1",
+    "on-finished": "~2.4.1",
     "parseurl": "~1.3.3",
+    "path-to-regexp": "0.1.12",
+    "path-to-regexp": "~0.1.12",
     "proxy-addr": "~2.0.7",
+    "qs": "6.13.0",
+    "qs": "~6.14.0",
     "range-parser": "~1.2.1",
     "safe-buffer": "5.2.1",
+    "send": "0.19.0",
+    "serve-static": "1.16.2",
+    "send": "~0.19.0",
+    "serve-static": "~1.16.2",
     "setprototypeof": "1.2.0",
+    "statuses": "2.0.1",
+    "statuses": "~2.0.1",
     "type-is": "~1.6.18",
     "utils-merge": "1.0.1",
     "vary": "~1.1.2"
     "hbs": "4.2.0",
     "marked": "0.7.0",
     "method-override": "3.0.0",
+    "mocha": "10.2.0",
+    "mocha": "^6.2.2",
     "morgan": "1.10.0",
+    "nyc": "15.1.0",
+    "nyc": "^14.1.1",
     "pbkdf2-password": "1.2.1",
+    "supertest": "6.3.0",
+    "supertest": "^6.1.6",
     "vhost": "~3.0.2"
   },
   "engines": {

Comparing
`express@4.21.2`

Comparing
`express@4.21.2`

Source

npm diff

Options

Bundlephobia

Packagephobia

Packagephobia

lib/utils.js +++1---1

package.json +++17---17

History.md +++6---0

+++0---0

Packagephobia

Source

lib/utils.js +++1---1

package.json +++17---17

History.md +++6---0

Comparingexpress@4.21.2

Comparingexpress@4.21.2

Source

npm diff

Options

Bundlephobia

Packagephobia

Packagephobia

lib/utils.js +++1---1

package.json +++17---17

History.md +++6---0

+++0---0

Packagephobia

Source

lib/utils.js +++1---1

package.json +++17---17

History.md +++6---0

Comparing
`express@4.21.2`

Comparing
`express@4.21.2`