Express vulnerabilities
The newest vulnerabilities affecting Express, up to 200. Subscribe by RSS.
- CVE-2024-10491Preload arbitrary resources by injecting additional `Link` headersexpress
- CVE-2024-9266Open Redirectexpressjs express · express
- CVE-2024-43796express vulnerable to XSS via response.redirect()expressjs express · express
- CVE-2024-29041Express.js Open Redirect in malformed URLsexpressjs express · express
- CVE-2022-21169Prototype Pollutionexpress-xss-sanitizer
- CVE-2020-7767Regular Expression Denial of Service (ReDoS)express-validators
- CVE-2020-7699Prototype Pollutionexpress-fileupload
- CVE-2020-7616express-mock-middleware through 0.0.6 is vulnerable to Prototype Pollution.express-mock-middleware
- CVE-2014-6393The Express web framework before 3.11 and 4.x before 4.5 for Node.js does not provide a charset field in HTTP Content-Type headers in 400 leexpress