Openjsf / Express

5 CVEs

CVE ID	Description	Severity	CVSS	Published
CVE-2024-10491	Preload arbitrary resources by injecting additional `Link` headers	MEDIUM	5.4	Oct 29, 2024
CVE-2024-43796	express vulnerable to XSS via response.redirect()	LOW	2.3	Sep 10, 2024
CVE-2024-29041	Express.js Open Redirect in malformed URLs	MEDIUM	6.1	Mar 25, 2024
CVE-2022-24999	express: "qs" prototype poisoning causes the hang of the node process	HIGH	7.5	Nov 26, 2022
CVE-2014-6393	express: cross-site scripting via content-type header	MEDIUM	6.1	Aug 9, 2017

Rows per page

Showing 1 to 5 of 5 CVEs