Security Review 07/02/2026#13

Merged

jkyberneees merged 9 commits intomainfrom

security-review-1

Feb 7, 2026

Commits on Feb 7, 2026

fix: resolve 43 security vulnerabilities from penetration test
jkyberneees
committed
test: add comprehensive test coverage for all 43 security fixes
jkyberneees
committed
docs: update documentation, type declarations, and exports for security release
jkyberneees
committed
fix: refactor body-parser extended option semantics and harden prototype pollution protection
jkyberneees
committed
Update lib/middleware/README.md

jkyberneees
and
Copilot
authored
fix: add cacheSize to IRouterConfig type declaration
jkyberneees
committed
fix: improve rate limiter IP detection with socket.remoteAddress fallback and type declarations
jkyberneees
committed
fix: improve LRU cache with refresh-on-access and refactor benchmarks
jkyberneees
committed
fix: prevent CORS policy header leakage for rejected origins
jkyberneees
committed