v5.2.1

Kieirra/murmurev5.2.1Dec 1, 2025by jonchurch

AI Summary

This release serves as a hotfix to revert an erroneous breaking change introduced in v5.2.0 regarding the extended query parser. The change was mistakenly associated with a security vulnerability, but CVE-2024-51999 has been rejected, making the behavior revert necessary.

Key Highlights

Reverts erroneous breaking change from v5.2.0 related to the extended query parser
CVE-2024-51999 has been rejected; no actual security vulnerability exists
Fully reverts the change in this release

Full Release Notes

## What's Changed

> [!IMPORTANT]  
> The prior release (5.2.0) included an erroneous breaking change related to the extended query parser. There is no actual security vulnerability associated with this behavior (CVE-2024-51999 has been rejected). The change has been fully reverted in this release.

* Release: 5.2.1 by @UlisesGascon in https://github.com/expressjs/express/pull/6933

**Full Changelog**: https://github.com/expressjs/express/compare/v5.2.0...v5.2.1