EX
Product
express
4
CVEs
0
On KEV
6.1
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 4Low 0
Watch
Add express to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-29041 | 6.1 | Mar 25 | Express.js Open Redirect in malformed URLs Affected: >=4.14.0, <4.19.0; >=5.0.0-alpha.1, <5.0.0-beta.3 |
| CVE-2024-10491 | 5.3 | Oct 29 | Preload arbitrary resources by injecting additional `Link` headers Affected: 3.0.0-alpha1 through 3.21.2 |
| CVE-2024-9266 | 4.7 | Oct 3 | Open Redirect Affected: 3.4.5 before 4.0.0 |
| CVE-2024-43796 | 4.7 | Sep 10 | express vulnerable to XSS via response.redirect() Affected: < 4.20.0; >= 5.0.0-alpha.1, < 5.0.0 |
Showing 4