Skip to content
OpenAdvisories

Package · npm

express-gateway

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Low 3.5
    CVE-2025-9096

    ExpressGateway express-gateway REST Endpoint apps.js cross site scripting

    A vulnerability has been found in ExpressGateway express-gateway up to 1.16.10. Affected is an unknown function in the library lib/rest/routes/apps.js of the component REST Endpoint. The manipulation leads to cross site scripting. It is possible to launch the…

    ExpressGateway express-gateway express-gateway npm
  • Low 3.5
    CVE-2025-9095

    ExpressGateway express-gateway REST Endpoint users.js cross site scripting

    A flaw has been found in ExpressGateway express-gateway up to 1.16.10. This issue affects some unknown processing in the library lib/rest/routes/users.js of the component REST Endpoint. The manipulation leads to cross site scripting. The attack may be initiat…

    ExpressGateway express-gateway express-gateway npm