ExpressGateway express-gateway

• CVE-2026-107177 Medium 5.9 Express Gateway through 1.16.11 Hardcoded Default cipherKey Exposes OAuth Tokens 0.3%
• CVE-2026-107162 Medium 6.8 Express Gateway through 1.16.11 OAuth 2.0 Refresh Token Validation Bypass 0.4%
• CVE-2025-9096 Low 3.5 ExpressGateway express-gateway REST Endpoint apps.js cross site scripting 0.3%
• CVE-2025-9095 Low 3.5 ExpressGateway express-gateway REST Endpoint users.js cross site scripting 0.3%