npm/express CVE-2024-9266: medium 4.7, EPSS 0.46%
Express Open Redirect vulnerability
Action: Upgrade express to 4.0.0-rc1 or later.
npm i express@4.0.0-rc1Affected
| introduced | fixed | last affected |
|---|---|---|
| 3.4.5 | 4.0.0-rc1 | - |
Fixed versions
| 4.0.0-rc1 |
Sources
- osv: GHSA-jj78-5fmv-mv28
- https://nvd.nist.gov/vuln/detail/CVE-2024-9266
- https://github.com/expressjs/express
- https://github.com/expressjs/express/compare/3.4.4...3.4.5
- https://www.herodevs.com/vulnerability-directory/cve-2024-9266
CVE-2024-9266 · published · modified · JSON