Vulnerabilities in expressjs
13 resultsCVE-2024-45590HIGHbody-parser vulnerable to denial of service when url encoding is enabledEPSS 0.8%CVE-2024-29041MEDIUMExpress.js Open Redirect in malformed URLsEPSS 0.8%CVE-2025-47944HIGHMulter vulnerable to Denial of Service from maliciously crafted requestsEPSS 0.7%CVE-2025-47935HIGHMulter vulnerable to Denial of Service via memory leaks from unclosed streamsEPSS 0.7%CVE-2025-7338HIGHMulter vulnerable to Denial of Service via unhandled exception from malformed requestEPSS 0.6%CVE-2024-43800MEDIUMserve-static affected by template injection that can lead to XSSEPSS 0.6%CVE-2026-3304HIGHMulter vulnerable to Denial of Service via incomplete cleanupEPSS 0.6%CVE-2026-2359HIGHMulter vulnerable to Denial of Service via resource exhaustionEPSS 0.6%CVE-2026-3520HIGHMulter vulnerable to Denial of Service via uncontrolled recursionEPSS 0.5%CVE-2024-47178HIGHbasic-auth-connect's callback uses time unsafe string comparisonEPSS 0.5%CVE-2024-43796MEDIUMexpress vulnerable to XSS via response.redirect()EPSS 0.5%CVE-2024-9266MEDIUMOpen RedirectEPSS 0.4%CVE-2025-48997HIGHMulter vulnerable to Denial of Service via unhandled exceptionEPSS 0.4%