CVE-2024-43796
1 advisory.
npm/express CVE-2024-43796: medium 5, EPSS 0.49%
express vulnerable to XSS via response.redirect()
Action: Upgrade express to 4.20.0 or later.
npm i express@4.20.0npm i express@5.0.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.20.0 | - |
| 5.0.0-alpha.1 | 5.0.0 | - |
Fixed versions
| 4.20.0 | 5.0.0 |
Sources
- osv: GHSA-qw6h-vgh9-j6wx
- https://github.com/expressjs/express/security/advisories/GHSA-qw6h-vgh9-j6wx
- https://nvd.nist.gov/vuln/detail/CVE-2024-43796
- https://github.com/expressjs/express/commit/54271f69b511fea198471e6ff3400ab805d6b553
- https://github.com/expressjs/express
CVE-2024-43796 · published · modified · JSON