Vulnerabilidades em expressjs
13 resultadosAnálise Vexday
O Express.js possui 13 vulnerabilidades registradas na base, mas nenhuma sob ataque ativo ou com crítica CVSS, indicando risco baixo no curto prazo. A fraqueza dominante (CWE-248 - tratamento inadequado de exceções) reflete falhas de validação de entrada, e a ausência de divulgações recentes sugere que o risco está estabilizado, não emergente.
CVE-2024-45590HIGHbody-parser vulnerable to denial of service when url encoding is enabledEPSS 0.8%CVE-2024-29041MEDIUMExpress.js Open Redirect in malformed URLsEPSS 0.8%CVE-2025-47944HIGHMulter vulnerable to Denial of Service from maliciously crafted requestsEPSS 0.8%CVE-2025-47935HIGHMulter vulnerable to Denial of Service via memory leaks from unclosed streamsEPSS 0.8%CVE-2026-3520HIGHMulter vulnerable to Denial of Service via uncontrolled recursionEPSS 0.7%CVE-2026-2359HIGHMulter vulnerable to Denial of Service via resource exhaustionEPSS 0.7%CVE-2026-3304HIGHMulter vulnerable to Denial of Service via incomplete cleanupEPSS 0.7%CVE-2025-7338HIGHMulter vulnerable to Denial of Service via unhandled exception from malformed requestEPSS 0.6%CVE-2024-43800MEDIUMserve-static affected by template injection that can lead to XSSEPSS 0.6%CVE-2024-47178HIGHbasic-auth-connect's callback uses time unsafe string comparisonEPSS 0.5%CVE-2024-43796MEDIUMexpress vulnerable to XSS via response.redirect()EPSS 0.5%CVE-2024-9266MEDIUMOpen RedirectEPSS 0.4%CVE-2025-48997HIGHMulter vulnerable to Denial of Service via unhandled exceptionEPSS 0.4%