# What changed in compression

> 2 changes in compression 1 from its official release notes, upgrade guides and advisories: 1 security. Each one cited. Sources checked 2026-10-18. HTML: https://unstale.sh/npm/compression/

To see which of these apply to a repository, run `npx @unstale/cli init` in it.

## compression 1

### Security

- Fixes the security vulnerability identified as CVE-2026-87776. (1.8.2) — [release notes](https://github.com/expressjs/compression/releases/tag/v1.8.2), [security advisory](https://github.com/advisories/GHSA-VC2V-76PW-4V95)

### Fixes and other changes

- The no-transform directive is now matched case-insensitively. (1.8.2) — [release notes](https://github.com/expressjs/compression/releases/tag/v1.8.2)