express

Frameworks & LibrariesMIT

express release notes.

Latest v4.22.2 · by expressWritten in JavaScriptWebsiteexpressjs/expressRSS

Branches

5
v5.2.1
4
v4.22.2

Release activity

Release activity — 5 releases across 2 days in the last year. Each cell is one day; darker means more releases that day. Older weeks are hidden at this screen width.
JunJulAugSep
SundayNo releases on May 24, 2026No releases on May 31, 2026No releases on Jun 7, 2026No releases on Jun 14, 2026No releases on Jun 21, 2026No releases on Jun 28, 2026No releases on Jul 5, 2026No releases on Jul 12, 2026No releases on Jul 19, 2026No releases on Jul 26, 2026No releases on Aug 2, 2026No releases on Aug 9, 2026No releases on Aug 16, 2026No releases on Aug 23, 2026No releases on Aug 30, 2026No releases on Sep 6, 2026
MondayNo releases on May 25, 2026No releases on Jun 1, 2026No releases on Jun 8, 2026No releases on Jun 15, 2026No releases on Jun 22, 2026No releases on Jun 29, 2026No releases on Jul 6, 2026No releases on Jul 13, 2026No releases on Jul 20, 2026No releases on Jul 27, 2026No releases on Aug 3, 2026No releases on Aug 10, 2026No releases on Aug 17, 2026No releases on Aug 24, 2026No releases on Aug 31, 2026No releases on Sep 7, 2026
TuesdayNo releases on May 26, 2026No releases on Jun 2, 2026No releases on Jun 9, 2026No releases on Jun 16, 2026No releases on Jun 23, 2026No releases on Jun 30, 2026No releases on Jul 7, 2026No releases on Jul 14, 2026No releases on Jul 21, 2026No releases on Jul 28, 2026No releases on Aug 4, 2026No releases on Aug 11, 2026No releases on Aug 18, 2026No releases on Aug 25, 2026No releases on Sep 1, 2026No releases on Sep 8, 2026
WednesdayNo releases on May 27, 2026No releases on Jun 3, 2026No releases on Jun 10, 2026No releases on Jun 17, 2026No releases on Jun 24, 2026No releases on Jul 1, 2026No releases on Jul 8, 2026No releases on Jul 15, 2026No releases on Jul 22, 2026No releases on Jul 29, 2026No releases on Aug 5, 2026No releases on Aug 12, 2026No releases on Aug 19, 2026No releases on Aug 26, 2026No releases on Sep 2, 2026No releases on Sep 9, 2026
ThursdayNo releases on May 28, 2026No releases on Jun 4, 2026No releases on Jun 11, 2026No releases on Jun 18, 2026No releases on Jun 25, 2026No releases on Jul 2, 2026No releases on Jul 9, 2026No releases on Jul 16, 2026No releases on Jul 23, 2026No releases on Jul 30, 2026No releases on Aug 6, 2026No releases on Aug 13, 2026No releases on Aug 20, 2026No releases on Aug 27, 2026No releases on Sep 3, 2026No releases on Sep 10, 2026
FridayNo releases on May 29, 2026No releases on Jun 5, 2026No releases on Jun 12, 2026No releases on Jun 19, 2026No releases on Jun 26, 2026No releases on Jul 3, 2026No releases on Jul 10, 2026No releases on Jul 17, 2026No releases on Jul 24, 2026No releases on Jul 31, 2026No releases on Aug 7, 2026No releases on Aug 14, 2026No releases on Aug 21, 2026No releases on Aug 28, 2026No releases on Sep 4, 2026
SaturdayNo releases on May 30, 2026No releases on Jun 6, 2026No releases on Jun 13, 2026No releases on Jun 20, 2026No releases on Jun 27, 2026No releases on Jul 4, 2026No releases on Jul 11, 2026No releases on Jul 18, 2026No releases on Jul 25, 2026No releases on Aug 1, 2026No releases on Aug 8, 2026No releases on Aug 15, 2026No releases on Aug 22, 2026No releases on Aug 29, 2026No releases on Sep 5, 2026

5 releases in the last year, busiest day 4

Changelog

What changed from 4 to 5
Filter releases by branch
10 of 10 releases

v4.22.2

Latest
Changed 2
  • Update qs to ~6.15.1
  • Update body-parser to ~1.20.5
Fixed 1
  • Restore >20 array parsing for req.query repeated keys and unify array-cap behavior across notations to allow up to 1000 items

From express

What's Changed
  • fix: restore >20 array parsing for req.query repeated keys (8d09bfe6)
    • This also unifies array-cap behavior across notations. Indexed notation (a[0]=...) was historically capped at qs's default arrayLimit of 20 even in older qs versions; after this change it also allows up to 1000 items.
  • deps: qs@~6.15.1
  • deps: body-parser@~1.20.5
New Contributors

Full Changelog: https://github.com/expressjs/express/compare/v4.22.1...v4.22.2

View originalPermalink
How v4.22.2 went

v4.22.1

Fixed 1
  • Revert erroneous breaking change related to the extended query parser from the prior release

From express

What's Changed

[!IMPORTANT]
The prior release (4.22.0) included an erroneous breaking change related to the extended query parser. There is no actual security vulnerability associated with this behavior (CVE-2024-51999 has been rejected). The change has been fully reverted in this release.

Full Changelog: https://github.com/expressjs/express/compare/4.22.0...v4.22.1

View originalPermalink
How v4.22.1 went

v5.2.1

Fixed 1
  • Revert erroneous breaking change related to the extended query parser that was introduced in version 5.2.0

From express

What's Changed

[!IMPORTANT]
The prior release (5.2.0) included an erroneous breaking change related to the extended query parser. There is no actual security vulnerability associated with this behavior (CVE-2024-51999 has been rejected). The change has been fully reverted in this release.

Full Changelog: https://github.com/expressjs/express/compare/v5.2.0...v5.2.1

View originalPermalink
How v5.2.1 went

v5.2.0

Changed 5
  • Simplify acceptsLanguages implementation using spread operator
  • Use req.socket over deprecated req.connection
  • Use node protocol for querystring
  • Enforce explicit Buffer import and add lint rule
  • Use cached slice in app.listen
Fixed 1
  • Upgrade body-parser to 2.2.1 to address CVE-2025-13466
Deprecated 1
  • Add deprecation warnings for redirect arguments undefined
Security 1
  • Fix security vulnerability CVE-2024-51999

From express

Important: Security
What's Changed
New Contributors

Full Changelog: https://github.com/expressjs/express/compare/v5.1.0...v5.2.0

View originalPermalink
How v5.2.0 went

4.22.0

Changed 1
  • Update qs to 6.14.0
Fixed 1
  • Method functions with no path should error
Security 1
  • Security fix for CVE-2024-51999

From express

Important: Security
What's Changed

Full Changelog: https://github.com/expressjs/express/compare/4.21.2...4.22.0

View originalPermalink
How 4.22.0 went

v5.1.0

Added 1
  • Add support for ETag option in res.sendFile
Changed 8
  • Use loop for acceptParams
  • Simplify normalizeTypes function
  • Extend res.links() to allow adding multiple links with the same rel
  • Update body-parser to ^2.1.0
  • Update router to ^2.1.0
  • Update debug to ^4.4.0
  • Update qs to ^6.14.0
  • Update finalhandler to 2.1.0
Fixed 1
  • Use node:buffer instead of safe-buffer
Removed 4
  • Remove Object.setPrototypeOf polyfill
  • Replace methods dependency with standard library
  • Remove utils-merge dependency and use spread syntax instead
  • Remove unused depd dependency
Security 1
  • Fix vulnerabilities

From express

What's Changed
New Contributors

Full Changelog: https://github.com/expressjs/express/compare/5.0.1...v5.1.0

View originalPermalink
How v5.1.0 went

4.21.2

Changed 1
  • Update path-to-regexp to 0.1.12

From express

What's Changed

Full Changelog: https://github.com/expressjs/express/compare/4.21.1...4.21.2

View originalPermalink
How 4.21.2 went
v5.0.1

5.0.1

Security 1
  • Update cookie dependency semver lock to address CVE-2024-47764

From express

What's Changed

Full Changelog: https://github.com/expressjs/express/compare/v5.0.0...5.0.1

View originalPermalink
How v5.0.1 went

4.21.0

Changed 3
  • Upgrade finalhandler to 1.3.1
  • Upgrade serve-static to 1.16.2
  • Upgrade qs to 6.13.0 to match qs in body-parser
Deprecated 1
  • Deprecate "back" magic string in redirects

From express

What's Changed
New Contributors

Full Changelog: https://github.com/expressjs/express/compare/4.20.0...4.21.0

View originalPermalink
How 4.21.0 went

More in Frameworks & Libraries

View all
React

The library for web and native user interfaces.

Meta
Vue 2

The Vue 2 line, in long-term maintenance since its end of life in December 2023.

Vue.js
Vue

The progressive JavaScript framework for building user interfaces.

Vue.js
bootstrap

The most popular HTML, CSS, and JavaScript framework for developing responsive, mobile first projects on the web.

twbs
react-native

react-native release notes.

Meta
D3

Bring data to life with SVG, Canvas and HTML.

Observable

Discussion

If you publish express, you can claim this product by proving you administer its repository.