Product by Openjsf
Express
5 known vulnerabilities in Express (Openjsf), 0 of them actively exploited (CISA KEV).
Key figures
5
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2022-24999 | Openjsf Express: security vulnerability | 7.5 | |
| Medium | CVE-2014-6393 | Openjsf Express: Cross-Site Scripting (XSS) | 6.1 | |
| Medium | CVE-2024-29041 | Express.js Open Redirect in malformed URLs | 6.1 | |
| Medium | CVE-2024-43796 | express vulnerable to XSS via response.redirect() | 5.0 | |
| Medium | CVE-2024-10491 | Preload arbitrary resources by injecting additional `Link` headers | 4.0 |