Skip to content
OpenAdvisories

Product · cedar-policy

authorization-for-expressjs

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2026-49473

    @cedar-policy/authorization-for-expressjs has an authorization bypass via query string manipulation

    @cedar-policy/authorization-for-expressjs is an open-source Express.js middleware that integrates Cedar authorization into Express applications by mapping HTTP requests to Cedar actions and evaluating authorization policies before allowing requests to proceed…

    cedar-policy authorization-for-expressjs @cedar-policy/authorization-for-expressjs npm