v4.22.1

farion1231/cc-switchv4.22.1Dec 1, 2025by jonchurch

AI Summary

This release mirrors the hotfix found in v5.2.1, correcting the extended query parser behavior in the 4.x branch and clarifying that there is no actual security risk associated with CVE-2024-51999.

Key Highlights

Reverts erroneous breaking change from v4.22.0
CVE-2024-51999 confirmed as rejected
Fixes extended query parser behavior

Full Release Notes

## What's Changed

> [!IMPORTANT]  
> The prior release (4.22.0) included an erroneous breaking change related to the extended query parser. There is no actual security vulnerability associated with this behavior (CVE-2024-51999 has been rejected). The change has been fully reverted in this release.

* Release: 4.22.1 by @UlisesGascon in https://github.com/expressjs/express/pull/6934


**Full Changelog**: https://github.com/expressjs/express/compare/4.22.0...v4.22.1