All · Express

Newest first. Every filter here is also a feed: see the subscribe box.

1. 4.0med
   CVE-2024-10491Preload arbitrary resources by injecting additional `Link` headers

   Expressnpm
   2 y ago 2024-10-29
2. 4.7med
   CVE-2024-9266Open Redirect

   Expressnpm
   2 y ago 2024-10-03
3. 5.0med
   CVE-2024-43796express vulnerable to XSS via response.redirect()

   Expressnpm
   2 y ago 2024-09-10
4. 6.1med
   CVE-2024-29041Express.js Open Redirect in malformed URLs

   Expressnpm
   2 y ago 2024-03-25
5. 7.5high
   CVE-2022-24999qs vulnerable to Prototype Pollution

   EPSS 15.7% chance of exploitation in 30 days, percentile 97%EPSS 15.7%Expressnpm
   3 y ago 2022-11-26
6. 6.1med
   CVE-2014-6393No Charset in Content-Type Header in express

   EPSS 1.1% chance of exploitation in 30 days, percentile 67%EPSS 1.1%Expressnpm
   9 y ago 2017-08-09