What’s Vulnerable › Products

expressjs express vulnerabilities

5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 0 published in the last 12 months.

Check whether your expressjs express version is affected

Latest expressjs express vulnerabilities

• CVE-2024-10491 — Preload arbitrary resources by injecting additional `Link` headers (CVSS 5.3)
• CVE-2024-43796 — express vulnerable to XSS via response.redirect() (CVSS 4.7)
• CVE-2024-29041 — Express.js Open Redirect in malformed URLs (CVSS 6.1)
• CVE-2022-24999 — qs vulnerable to Prototype Pollution (CVSS 7.5)
• CVE-2014-6393 — (CVSS 6.1)