What’s Vulnerable › Products

express-rate-limit vulnerabilities

1 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your express-rate-limit version is affected

Latest express-rate-limit vulnerabilities

• CVE-2026-30827 — express-rate-limit: IPv4-mapped IPv6 addresses bypass per-client rate limiting (all IPv4 clients share one bucket on dual-stack servers) (CVSS 7.5)