CVE-2025-9096
1 advisory.
npm/express-gateway CVE-2025-9096: low 3.5, EPSS 0.32%
ExpressGateway Cross-Site Scripting Vulnerability in lib/rest/routes/apps.js
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 1.16.10 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-xfp8-x3j6-h67v
- https://nvd.nist.gov/vuln/detail/CVE-2025-9096
- https://github.com/freshfish-hust/my-cves/issues/6
- https://github.com/freshfish-hust/my-cves/issues/6#issue-3287078206
- https://github.com/ExpressGateway/express-gateway
- https://vuldb.com/?ctiid.320418
- https://vuldb.com/?id.320418
- https://vuldb.com/?submit.627833
CVE-2025-9096 · published · modified · JSON