expressjs

Products

Exploited and recent CVEs

• CVE-2026-3520 High 7.5 Multer vulnerable to Denial of Service via uncontrolled recursion 0.8%
• CVE-2026-3304 High 7.5 Multer vulnerable to Denial of Service via incomplete cleanup 0.7%
• CVE-2026-2359 High 7.5 Multer vulnerable to Denial of Service via resource exhaustion 0.7%
• CVE-2025-7338 High 7.5 Multer vulnerable to Denial of Service via unhandled exception from malformed request 0.8%
• CVE-2025-48997 High 8.7 Multer vulnerable to Denial of Service via unhandled exception 0.5%
• CVE-2025-47944 High 7.5 Multer vulnerable to Denial of Service from maliciously crafted requests 0.8%
• CVE-2025-47935 High 7.5 Multer vulnerable to Denial of Service via memory leaks from unclosed streams 0.8%
• CVE-2024-9266 Medium 4.7 Open Redirect 0.5%
• CVE-2024-47178 High 8.7 basic-auth-connect's callback uses time unsafe string comparison 0.5%
• CVE-2024-45590 High 7.5 body-parser vulnerable to denial of service when url encoding is enabled 0.8%
• CVE-2024-43800 Medium 5.0 serve-static affected by template injection that can lead to XSS 0.6%
• CVE-2024-43796 Medium 5.0 express vulnerable to XSS via response.redirect() 0.5%
• CVE-2024-29041 Medium 6.1 Express.js Open Redirect in malformed URLs 0.8%