Skip to content
OpenAdvisories

Package · npm

express-openid-connect

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2022-24794

    Open Redirect in express-openid-connect

    Express OpenID Connect is an Express JS middleware implementing sign on for Express web apps using OpenID Connect. Users of the `requiresAuth` middleware, either directly or through the default `authRequired` option, are vulnerable to an Open Redirect when th…

    auth0 express-openid-connect express-openid-connect npm