Login Request a demo
EX
Product
Express
by Openjsf · last CVE Oct 29, 2024
5
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Vulnerabilities5In the news0Timeline
Severity mix
Critical 0High 1Medium 4Low 0
Severity
All severities5Critical0High1Medium4Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Express to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-29041
6.1
1%
Mar 25
Express.js minimalist web framework for node
Affected: before 4.19.2; 5.0.0; 5.0.0; 5.0.0; 5.0.0; 5.0.0; +5 more
CVE-2014-6393
6.1
1%
Aug 9
The Express web framework before 3.11 and 4.x before 4.5 for Node.js does not provide a charset field in HTTP Content-Type headers in 400 level responses, which might allow remote…
Affected: through 3.10.5; 4.0.0; 4.1.0; 4.1.1; 4.1.2; 4.2.0; +9 more
CVE-2024-10491
5.3
0%
Oct 29
A vulnerability has been identified in the Express response.links function, allowing for arbitrary resource injection in the Link header when unsanitized data is used
Affected: 3.0.0 before 3.21.5
CVE-2024-43796
4.7
0%
Sep 10
express vulnerable to XSS via response.redirect()
Affected: before 4.20.0; 5.0.0; 5.0.0; 5.0.0; 5.0.0; 5.0.0; +6 more
Showing 4