Skip to content

Commit 3c6dd01

Browse files
committed
docs: fix wording typo in security updates note
1 parent 2d4df3f commit 3c6dd01

1 file changed

Lines changed: 2 additions & 2 deletions

File tree

en/advanced/security-updates.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -33,7 +33,7 @@ If you believe you have discovered a security vulnerability in Express, please s
3333
* The dependency `serve-static` has been updated to address a [vulnerability](https://github.com/advisories/GHSA-cm22-4g7w-348p).
3434
* The dependency `send` has been updated to address a [vulnerability](https://github.com/advisories/GHSA-m6fv-jmcg-4jfg).
3535
* The dependency `path-to-regexp` has been updated to address a [vulnerability](https://github.com/pillarjs/path-to-regexp/security/advisories/GHSA-9wv6-86v2-598j).
36-
* The dependency `body-parser` has been updated to addres a [vulnerability](https://github.com/advisories/GHSA-qwcr-r2fm-qrc7), This may affect your application if you had url enconding activated.
36+
* The dependency `body-parser` has been updated to address a [vulnerability](https://github.com/advisories/GHSA-qwcr-r2fm-qrc7), This may affect your application if you had URL encoding activated.
3737
* 4.19.0, 4.19.1
3838
* Fixed open redirect vulnerability in `res.location` and `res.redirect` ([advisory](https://github.com/expressjs/express/security/advisories/GHSA-rv95-896h-c2vc), [CVE-2024-29041](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-29041)).
3939
* 4.17.3
@@ -83,4 +83,4 @@ If you believe you have discovered a security vulnerability in Express, please s
8383
* Sparse arrays that have extremely high indexes in query string could cause the process to run out of memory and crash the server.
8484
* Extremely nested query string objects could cause the process to block and make the server unresponsive temporarily.
8585
* 3.3.0
86-
* The 404 response of an unsupported method override attempt was susceptible to cross-site scripting attacks.
86+
* The 404 response of an unsupported method override attempt was susceptible to cross-site scripting attacks.

0 commit comments

Comments
 (0)