Description
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Express. This vulnerability affects the use of the Express Response object. This issue impacts Express: from 3.4.5 before 4.0.0.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| expressjs | express | 3.4.5 – < 4.0.0 | 4.0.0 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | express | >= 3.4.5, < 4.0.0-rc1 | 4.0.0-rc1 | GHSA-jj78-5fmv-mv28 |