CVE-2025-9095
1 advisory.
npm/express-gateway CVE-2025-9095: low 3.5, EPSS 0.27%
ExpressGateway Cross-Site Scripting Vulnerability in lib/rest/routes/users.js
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 1.16.10 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-q4rg-7cjj-5r86
- https://nvd.nist.gov/vuln/detail/CVE-2025-9095
- https://github.com/freshfish-hust/my-cves/issues/5
- https://github.com/freshfish-hust/my-cves/issues/5#issue-3286622393
- https://github.com/ExpressGateway/express-gateway
- https://vuldb.com/?ctiid.320417
- https://vuldb.com/?id.320417
- https://vuldb.com/?submit.627709
CVE-2025-9095 · published · modified · JSON