Comparing express@4.22.0...express@4.22.1 • npm-diff.app 📦🔃

 function parseExtendedQueryString(str) {
   return qs.parse(str, {
+    plainObjects: true
+    allowPrototypes: true
   });
+}

+{
   "name": "express",
   "description": "Fast, unopinionated, minimalist web framework",
+  "version": "4.22.0",
+  "version": "4.22.1",
   "author": "TJ Holowaychuk <tj@vision-media.ca>",
   "contributors": [
     "Aaron Heckmann <aaron.heckmann+github@gmail.com>",

+.22.1 / 2025-12-01
+==========
+  * Revert security fix for [CVE-2024-51999](https://www.cve.org/CVERecord?id=CVE-2024-51999) ([GHSA-pj86-cfqh-vqx6](https://github.com/expressjs/express/security/advisories/GHSA-pj86-cfqh-vqx6))
 .22.0 / 2025-12-01
 ==========
   * Security fix for [CVE-2024-51999](https://www.cve.org/CVERecord?id=CVE-2024-51999) ([GHSA-pj86-cfqh-vqx6](https://github.com/expressjs/express/security/advisories/GHSA-pj86-cfqh-vqx6))

 function parseExtendedQueryString(str) {
   return qs.parse(str, {
+    plainObjects: true
+    allowPrototypes: true
   });
+}

+{
   "name": "express",
   "description": "Fast, unopinionated, minimalist web framework",
+  "version": "4.22.0",
+  "version": "4.22.1",
   "author": "TJ Holowaychuk <tj@vision-media.ca>",
   "contributors": [
     "Aaron Heckmann <aaron.heckmann+github@gmail.com>",

Comparing
`express@4.22.0`