Skip to content
OpenAdvisories

Vendor

express

1 known vulnerabilities.

Products

express 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.0
    CVE-2024-10491

    Preload arbitrary resources by injecting additional `Link` headers

    A vulnerability has been identified in the Express response.links function, allowing for arbitrary resource injection in the Link header when unsanitized data is used. The issue arises from improper sanitization in `Link` header values, which can allow a comb…

    express express express node-express Debian npm