{"action":"Upgrade express to 4.0.0-rc1 or later.","affected":[{"fixed":"4.0.0-rc1","introduced":"0"}],"component":"express","cve_ids":["CVE-2024-10491"],"ecosystem":"npm","epss":0.00441,"exploited":false,"fixed_versions":["4.0.0-rc1"],"ghsa_id":"GHSA-cm5g-3pgc-8rg4","id":"tcs_01M5KFK2J293W034NMTZZCZ35T","modified_at":"2024-12-19T17:52:09Z","published_at":"2024-10-29T18:30:37Z","references":["https://osv.dev/vulnerability/GHSA-cm5g-3pgc-8rg4","https://nvd.nist.gov/vuln/detail/CVE-2024-10491","https://github.com/expressjs/express/issues/6222","https://github.com/expressjs/express","https://www.herodevs.com/vulnerability-directory/cve-2024-10491"],"severity":{"label":"medium","score":4},"sources":[{"source":"osv","source_id":"GHSA-cm5g-3pgc-8rg4","url":"https://osv.dev/vulnerability/GHSA-cm5g-3pgc-8rg4"}],"summary":"Express ressource injection"}