v4.22.1

yukangcao/DreamAvatarv4.22.1Dec 1, 2025by jonchurch

AI Summary

This release fully reverts an erroneous breaking change introduced in version 4.22.0 concerning the extended query parser. It clarifies that there is no associated security vulnerability, as CVE-2024-51999 has been rejected.

Key Highlights

Reverts erroneous breaking change related to the extended query parser
CVE-2024-51999 has been rejected (no security vulnerability)
Fixes the behavior introduced in the previous release (v4.22.0)

Full Release Notes

## What's Changed

> [!IMPORTANT]  
> The prior release (4.22.0) included an erroneous breaking change related to the extended query parser. There is no actual security vulnerability associated with this behavior (CVE-2024-51999 has been rejected). The change has been fully reverted in this release.

* Release: 4.22.1 by @UlisesGascon in https://github.com/expressjs/express/pull/6934


**Full Changelog**: https://github.com/expressjs/express/compare/4.22.0...v4.22.1