{"schemaVersion":3,"id":"CVE-2025-13466","aliases":["UBUNTU-CVE-2025-13466","DEBIAN-CVE-2025-13466","CGA-4wxr-qfgv-rcgx","CGA-5p2f-h4vv-75gv","CGA-5pj6-rcjf-mj5h","CGA-5x5g-fmhq-mm96","CGA-6vcx-9f5j-6j5f","CGA-8xqg-5qc6-9w3r","CGA-9gw6-qgv8-494m","CGA-m6fq-853f-h6xg","CGA-qp4f-fpw9-ggfr","GHSA-wqch-xfxh-vrr4","CGA-25c6-9cxj-854c","CGA-2hqg-5g46-cvm4","CGA-2ppx-64ch-7jj2","CGA-2v2v-58fc-9j2w","CGA-36cx-7qwp-7ff8","CGA-44v5-42h9-pg4h","CGA-4w5g-wwqm-g6x7","CGA-5h9h-346g-h936","CGA-5vpf-j2jc-jgrf","CGA-6hvw-mrg8-g82p","CGA-6pq8-q7wr-39jp","CGA-735r-h42g-6qpg","CGA-78wg-fc2c-hf5j","CGA-7cwg-c28p-3v5q","CGA-83c9-qprh-4xv8","CGA-8x8m-vqr6-r64c","CGA-8xqj-chjq-mpjj","CGA-92p2-8x28-9r8j","CGA-93cr-64hf-ph99","CGA-95jm-g6wx-6hmq","CGA-9hx9-rh85-94v6","CGA-9xp8-5p29-64xx","CGA-c4gc-mvh5-w6rv","CGA-c65r-6cw3-rq9g","CGA-cg35-j393-g5xm","CGA-f4p3-7r33-78gh","CGA-f5rj-j3g4-q982","CGA-g2r3-p864-j42v","CGA-g5mx-p6r7-4m78","CGA-g86r-cj2h-c3gw","CGA-gh4v-vw7m-2h5m","CGA-hr5g-r42q-8x5p","CGA-hr68-m9vp-74r3","CGA-j9xf-jr6h-2jfh","CGA-m7c4-588r-rm36","CGA-m9cj-7433-f9j6","CGA-mxv5-cvvm-3626","CGA-pcg4-gccx-xh6q","CGA-q7mc-hwrf-5rxf","CGA-qf4v-vv7w-qhw9","CGA-qp7f-gmp2-vmm8","CGA-r5f9-cjx7-v67p","CGA-v9mm-9hmc-pm49","CGA-w3c7-grc8-9649","CGA-wgm8-9hg6-vgpj","CGA-wpwq-x8j7-j6jr","CGA-wx6c-h8j4-h97r","CGA-x597-7x6g-6386","CGA-xc23-pfp5-5wqf"],"status":"published","duplicateOf":null,"title":null,"description":"body-parser 2.2.0 is vulnerable to denial of service due to inefficient handling of URL-encoded bodies with very large numbers of parameters. An attacker can send payloads containing thousands of parameters within the default 100KB request size limit, causing elevated CPU and memory usage. This can lead to service slowdown or partial outages under sustained malicious traffic.\nThis issue is addressed in version 2.2.1.","dates":{"published":"2025-11-24T18:29:36.725Z","modified":"2025-11-24T18:57:00.939Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":5.5,"severity":"medium","version":"4.0","versionLabel":"v4.0","source":"CVE.org","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L/E:P/AU:Y","computed":false,"selection":"backend-summary"},"metrics":[{"version":"4.0","versionLabel":"v4.0","source":"CVE.org","score":5.5,"severity":"medium","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L/E:P/AU:Y","exploitability":null,"impact":null,"computed":false},{"version":"4.0","versionLabel":"v4.0","source":"OSV · Ubuntu","score":6.9,"severity":"medium","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L/E:P/AU:Y","exploitability":null,"impact":null,"computed":true},{"version":"4.0","versionLabel":"v4.0","source":"OSV · Debian","score":6.9,"severity":"medium","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:X/V:X/RE:X/U:X","exploitability":null,"impact":null,"computed":true},{"version":"4.0","versionLabel":"v4.0","source":"OSV · Wolfi","score":6.9,"severity":"medium","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L/E:P/AU:Y","exploitability":null,"impact":null,"computed":true},{"version":"4.0","versionLabel":"v4.0","source":"OSV · Npm","score":6.9,"severity":"medium","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L/E:P","exploitability":null,"impact":null,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Npm","score":5.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","exploitability":10,"impact":2.3,"computed":true},{"version":"4.0","versionLabel":"v4.0","source":"OSV · Chainguard","score":6.9,"severity":"medium","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L/E:P/AU:Y","exploitability":null,"impact":null,"computed":true},{"version":"4.0","versionLabel":"v4.0","source":"NVD","score":5.5,"severity":"medium","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:X/V:X/RE:X/U:X","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00365,"percentile":0.28925,"severity":"low","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":-0.003000000000000008,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.00368},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.00368,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.00368,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.00368,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.00368,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.00368,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00368,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00368,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00368,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00368,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00368,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00368,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00368,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00368,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00368,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00368,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00368,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00368,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00368,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00368,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00368,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00368,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00368,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00368,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00368,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00368,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00368,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00368,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00368,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00368,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00368,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00368,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00365,"percentile":0.28925}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.00368,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00368,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00368,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00368,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00368,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00368,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00368,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00368,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00368,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00368,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00368,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00368,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00368,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00368,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00368,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00368,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00368,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00368,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00368,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00368,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00368,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00368,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00368,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00368,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00368,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00368,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00365,"percentile":0.28925}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-400","name":"Uncontrolled Resource Consumption","description":"The product does not properly control the allocation and maintenance of a limited resource.","type":"weakness","status":"Draft","abstraction":"Class","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/400.html"}],"affected":[{"vendor":"chainguard","product":"code-server","name":"code-server","label":"code-server","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/code-server","purlType":"apk","versions":[{"text":"< 4.106.2-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.106.2-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"code-server-compat","name":"code-server-compat","label":"code-server-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/code-server-compat","purlType":"apk","versions":[{"text":"< 4.106.2-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.106.2-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-9.2","name":"kibana-9.2","label":"kibana-9.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-9.2","purlType":"apk","versions":[{"text":"< 9.2.1-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.2.1-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-9.2-iamguarded","name":"kibana-9.2-iamguarded","label":"kibana-9.2-iamguarded","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-9.2-iamguarded","purlType":"apk","versions":[{"text":"< 9.2.1-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.2.1-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"librechat","name":"librechat","label":"librechat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/librechat","purlType":"apk","versions":[{"text":"< 0.8.1-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.8.1-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2","name":"opensearch-dashboards-2","label":"opensearch-dashboards-2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2","purlType":"apk","versions":[{"text":"< 2.19.4-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.19.4-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-alerting-dashboards-plugin","name":"opensearch-dashboards-2-alerting-dashboards-plugin","label":"opensearch-dashboards-2-alerting-dashboards-plugin","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-alerting-dashboards-plugin","purlType":"apk","versions":[{"text":"< 2.19.4-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.19.4-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-anomaly-detection-dashboards-plugin","name":"opensearch-dashboards-2-anomaly-detection-dashboards-plugin","label":"opensearch-dashboards-2-anomaly-detection-dashboards-plugin","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-anomaly-detection-dashboards-plugin","purlType":"apk","versions":[{"text":"< 2.19.4-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.19.4-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-dashboards-maps","name":"opensearch-dashboards-2-dashboards-maps","label":"opensearch-dashboards-2-dashboards-maps","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-dashboards-maps","purlType":"apk","versions":[{"text":"< 2.19.4-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.19.4-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-dashboards-notifications","name":"opensearch-dashboards-2-dashboards-notifications","label":"opensearch-dashboards-2-dashboards-notifications","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-dashboards-notifications","purlType":"apk","versions":[{"text":"< 2.19.4-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.19.4-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-dashboards-observability","name":"opensearch-dashboards-2-dashboards-observability","label":"opensearch-dashboards-2-dashboards-observability","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-dashboards-observability","purlType":"apk","versions":[{"text":"< 2.19.4-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.19.4-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-dashboards-query-workbench","name":"opensearch-dashboards-2-dashboards-query-workbench","label":"opensearch-dashboards-2-dashboards-query-workbench","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-dashboards-query-workbench","purlType":"apk","versions":[{"text":"< 2.19.4-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.19.4-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-dashboards-reporting","name":"opensearch-dashboards-2-dashboards-reporting","label":"opensearch-dashboards-2-dashboards-reporting","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-dashboards-reporting","purlType":"apk","versions":[{"text":"< 2.19.4-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.19.4-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-dashboards-search-relevance","name":"opensearch-dashboards-2-dashboards-search-relevance","label":"opensearch-dashboards-2-dashboards-search-relevance","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-dashboards-search-relevance","purlType":"apk","versions":[{"text":"< 2.19.4-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.19.4-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-dashboards-visualizations","name":"opensearch-dashboards-2-dashboards-visualizations","label":"opensearch-dashboards-2-dashboards-visualizations","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-dashboards-visualizations","purlType":"apk","versions":[{"text":"< 2.19.4-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.19.4-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-fips","name":"opensearch-dashboards-2-fips","label":"opensearch-dashboards-2-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips","purlType":"apk","versions":[{"text":"< 2.19.4-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.19.4-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-fips-alerting-dashboards-plugin","name":"opensearch-dashboards-2-fips-alerting-dashboards-plugin","label":"opensearch-dashboards-2-fips-alerting-dashboards-plugin","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips-alerting-dashboards-plugin","purlType":"apk","versions":[{"text":"< 2.19.4-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.19.4-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-fips-anomaly-detection-dashboards-plugin","name":"opensearch-dashboards-2-fips-anomaly-detection-dashboards-plugin","label":"opensearch-dashboards-2-fips-anomaly-detection-dashboards-plugin","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips-anomaly-detection-dashboards-plugin","purlType":"apk","versions":[{"text":"< 2.19.4-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.19.4-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-fips-config","name":"opensearch-dashboards-2-fips-config","label":"opensearch-dashboards-2-fips-config","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips-config","purlType":"apk","versions":[{"text":"< 2.19.4-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.19.4-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-fips-dashboards-notifications","name":"opensearch-dashboards-2-fips-dashboards-notifications","label":"opensearch-dashboards-2-fips-dashboards-notifications","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips-dashboards-notifications","purlType":"apk","versions":[{"text":"< 2.19.4-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.19.4-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-fips-dashboards-observability","name":"opensearch-dashboards-2-fips-dashboards-observability","label":"opensearch-dashboards-2-fips-dashboards-observability","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips-dashboards-observability","purlType":"apk","versions":[{"text":"< 2.19.4-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.19.4-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-fips-dashboards-query-workbench","name":"opensearch-dashboards-2-fips-dashboards-query-workbench","label":"opensearch-dashboards-2-fips-dashboards-query-workbench","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips-dashboards-query-workbench","purlType":"apk","versions":[{"text":"< 2.19.4-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.19.4-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-fips-index-management-dashboards-plugin","name":"opensearch-dashboards-2-fips-index-management-dashboards-plugin","label":"opensearch-dashboards-2-fips-index-management-dashboards-plugin","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips-index-management-dashboards-plugin","purlType":"apk","versions":[{"text":"< 2.19.4-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.19.4-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-fips-ml-commons-dashboards","name":"opensearch-dashboards-2-fips-ml-commons-dashboards","label":"opensearch-dashboards-2-fips-ml-commons-dashboards","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips-ml-commons-dashboards","purlType":"apk","versions":[{"text":"< 2.19.4-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.19.4-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-fips-security-analytics-dashboards-plugin","name":"opensearch-dashboards-2-fips-security-analytics-dashboards-plugin","label":"opensearch-dashboards-2-fips-security-analytics-dashboards-plugin","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips-security-analytics-dashboards-plugin","purlType":"apk","versions":[{"text":"< 2.19.4-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.19.4-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-index-management-dashboards-plugin","name":"opensearch-dashboards-2-index-management-dashboards-plugin","label":"opensearch-dashboards-2-index-management-dashboards-plugin","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-index-management-dashboards-plugin","purlType":"apk","versions":[{"text":"< 2.19.4-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.19.4-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-ml-commons-dashboards","name":"opensearch-dashboards-2-ml-commons-dashboards","label":"opensearch-dashboards-2-ml-commons-dashboards","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-ml-commons-dashboards","purlType":"apk","versions":[{"text":"< 2.19.4-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.19.4-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-security-dashboards-plugin","name":"opensearch-dashboards-2-security-dashboards-plugin","label":"opensearch-dashboards-2-security-dashboards-plugin","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-security-dashboards-plugin","purlType":"apk","versions":[{"text":"< 2.19.4-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.19.4-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"redisinsight","name":"redisinsight","label":"redisinsight","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/redisinsight","purlType":"apk","versions":[{"text":"< 2.70.1-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.70.1-r5","eol":null,"hubHref":null},{"vendor":"chainguard","product":"redisinsight-docker-entrypoint","name":"redisinsight-docker-entrypoint","label":"redisinsight-docker-entrypoint","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/redisinsight-docker-entrypoint","purlType":"apk","versions":[{"text":"< 2.70.1-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.70.1-r5","eol":null,"hubHref":null},{"vendor":"chainguard","product":"saf","name":"saf","label":"saf","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/saf","purlType":"apk","versions":[{"text":"< 1.5.2-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.5.2-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"tileserver-gl","name":"tileserver-gl","label":"tileserver-gl","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/tileserver-gl","purlType":"apk","versions":[{"text":"< 5.4.0-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.4.0-r5","eol":null,"hubHref":null},{"vendor":"chainguard","product":"tileserver-gl-compat","name":"tileserver-gl-compat","label":"tileserver-gl-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/tileserver-gl-compat","purlType":"apk","versions":[{"text":"< 5.4.0-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.4.0-r5","eol":null,"hubHref":null},{"vendor":"chainguard","product":"tileserver-gl-fips","name":"tileserver-gl-fips","label":"tileserver-gl-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/tileserver-gl-fips","purlType":"apk","versions":[{"text":"< 5.4.0-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.4.0-r5","eol":null,"hubHref":null},{"vendor":"chainguard","product":"tileserver-gl-fips-compat","name":"tileserver-gl-fips-compat","label":"tileserver-gl-fips-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/tileserver-gl-fips-compat","purlType":"apk","versions":[{"text":"< 5.4.0-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.4.0-r5","eol":null,"hubHref":null},{"vendor":"wolfi","product":"code-server","name":"code-server","label":"code-server","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/code-server","purlType":"apk","versions":[{"text":"< 4.106.2-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.106.2-r1","eol":null,"hubHref":null},{"vendor":"wolfi","product":"code-server-compat","name":"code-server-compat","label":"code-server-compat","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/code-server-compat","purlType":"apk","versions":[{"text":"< 4.106.2-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.106.2-r1","eol":null,"hubHref":null},{"vendor":"wolfi","product":"saf","name":"saf","label":"saf","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/saf","purlType":"apk","versions":[{"text":"< 1.5.2-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.5.2-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"tileserver-gl","name":"tileserver-gl","label":"tileserver-gl","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/tileserver-gl","purlType":"apk","versions":[{"text":"< 5.4.0-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.4.0-r5","eol":null,"hubHref":null},{"vendor":"wolfi","product":"tileserver-gl-compat","name":"tileserver-gl-compat","label":"tileserver-gl-compat","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/tileserver-gl-compat","purlType":"apk","versions":[{"text":"< 5.4.0-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.4.0-r5","eol":null,"hubHref":null},{"vendor":"body-parser","product":"body-parser","name":"body-parser","label":"body-parser","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"2.2.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"2.2.0","eol":null,"hubHref":"/vendor/body-parser/body-parser"},{"vendor":"debian","product":"node-body-parser","name":"node-body-parser","label":"node-body-parser","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/node-body-parser","purlType":"deb","versions":[{"text":"< 2.2.1+~1.19.6-1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.2.1+~1.19.6-1","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"node-body-parser","name":"node-body-parser","label":"node-body-parser","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/node-body-parser","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"Npm","product":"body-parser","name":"body-parser","label":"body-parser","ecosystem":"Npm","cpePart":null,"purl":"pkg:npm/body-parser","purlType":"npm","versions":[{"text":"≥ 2.2.0, < 2.2.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 2.2.0, < 2.2.1","eol":null,"hubHref":null}],"affectedCount":44,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://github.com/expressjs/body-parser/security/advisories/GHSA-wqch-xfxh-vrr4","label":"github.com/expressjs/body-parser/security/advisories/GHSA-wqch-xfxh-vrr4","hostname":"github.com","tags":["Vendor Advisory","REPORT","Advisory","WEB"]},{"url":"https://ubuntu.com/security/CVE-2025-13466","label":"ubuntu.com/security/CVE-2025-13466","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-13466","label":"www.cve.org/CVERecord?id=CVE-2025-13466","hostname":"www.cve.org","tags":["REPORT"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2025-13466","label":"security-tracker.debian.org/tracker/CVE-2025-13466","hostname":"security-tracker.debian.org","tags":["Advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/13xxx/CVE-2025-13466.json","label":"github.com/CVEProject/cvelistV5/tree/main/cves/2025/13xxx/CVE-2025-13466.json","hostname":"github.com","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-13466","label":"nvd.nist.gov/vuln/detail/CVE-2025-13466","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://github.com/expressjs/body-parser","label":"github.com/expressjs/body-parser","hostname":"github.com","tags":["PACKAGE"]},{"url":"https://github.com/expressjs/body-parser/commit/b204886a6744b0b6d297cd0e849d75de836f3b63","label":"github.com/expressjs/body-parser/commit/b204886a6744b0b6d297cd0e849d75de836f3b63","hostname":"github.com","tags":["WEB"]},{"url":"https://github.com/expressjs/body-parser/releases/tag/v2.2.1","label":"github.com/expressjs/body-parser/releases/tag/v2.2.1","hostname":"github.com","tags":["WEB"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":["CGA-5HF6-7WR9-5633","CGA-7JQM-H2PJ-JG5Q","CGA-M5HC-VMHW-RRMP"]},"timeline":[{"kind":"published","date":"2025-11-24T18:29:36.725Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2025-11-24T18:57:00.939Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":22,"level":"low","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T05:38:12.643Z","stale":false,"partial":false}}