express

express vulnerable to XSS via response.redirect()

No Charset in Content-Type Header in express

Withdrawn Advisory: express improperly controls modification of query properties

Express.js Open Redirect in malformed URLs

Malicious code in expressos (npm)

angular vulnerable to regular expression denial of service via the <input type="url"> element

path-to-regexp vulnerable to Regular Expression Denial of Service via multiple wildcards

steal vulnerable to Regular Expression Denial of Service via source and sourceWithComments

Regular Expression Denial of Service (ReDoS) in lodash

es5-ext vulnerable to Regular Expression Denial of Service in `function#copy` and `function#toStringTokens`

XSS Attack with Express API

Regular expression denial of service in semver-regex

Regular Expression Denial of Service in dat.gui

Broken Authentication in Atlassian Connect Express

Malicious code in express-core-validator (npm)

Flowise: Weak Default Express Session Secret

express-param vulnerable to Improper Handling of Extra Parameters

printf vulnerable to Regular Expression Denial of Service (ReDoS)

Regular Expression Denial of Service in ssri

jsonpath has Arbitrary Code Injection via Unsafe Evaluation of JSON Path Expressions

Regular Expression Denial of Service in moment

Regular Expression Denial of Service in jadedown

Regular Expression Denial of Service in charset

Regular Expression Denial of Service (REDoS) in Marked

Malicious code in express-session-js (npm)

Uptime Kuma's Regular Expression in pushdeeer and whapi file Leads to ReDoS Vulnerability Due to Catastrophic Backtracking

path-to-regexp vulnerable to Regular Expression Denial of Service via multiple route parameters

Express XSS Sanitizer: allowedTags/allowedAttributes bypass leads to permissive sanitization (XSS risk)

Regular Expression Denial of Service in forwarded

Regular Expression Denial of Service in djvalidator

n8n has SQL Injection in Data Table Node via orderByColumn Expression

Malicious code in express-v4 (npm)

nope-validator Regular Expression Denial of Service vulnerability

Prototype Pollution in express-fileupload

Inefficient Regular Expression Complexity in chalk/ansi-regex

Regular Expression Denial of Service (ReDoS) in cross-spawn

Regular Expression Denial of Service in uglify-js

Regular expression deinal of service (ReDoS) in is-my-json-valid

Regular Expression Denial of Service in moment

rgb2hex vulnerable to inefficient regular expression complexity

Switcher Client contains Regular Expression Denial of Service (ReDoS)

Regular expression denial of service in npm-user-validate

Inefficient Regular Expression Complexity in code-server

Regular Expression Denial of Service in no-case

Inefficient Regular Expression Complexity in node-email-check

tarteaucitron.js has Regular Expression Denial of Service (ReDoS) vulnerability

@octokit/endpoint has a Regular Expression in parse that Leads to ReDoS Vulnerability Due to Catastrophic Backtracking

debug Inefficient Regular Expression Complexity vulnerability

Regular Expression Denial of Service in jshamcrest

Express-FileUpload Arbitrary File Overwrite

@octokit/plugin-paginate-rest has a Regular Expression in iterator Leads to ReDoS Vulnerability Due to Catastrophic Backtracking

Remote Code Execution Vulnerability in NPM mongo-express

v8n vulnerable to Inefficient Regular Expression Complexity

Regular Expression Denial of Service in trim

Parse Server LiveQuery subscription with invalid regular expression crashes server

html-parse-stringify and html-parse-stringify2 vulnerable to Regular expression denial of service (ReDoS)

markdown-it vulnerable to Inefficient Regular Expression Complexity

Regular Expression Denial of Service (ReDoS) in jsx-slack

Regular Expression Denial of Service in postcss

Regular Expression Denial of Service (ReDoS) in es6-crawler-detect

Regular Expression Denial of Service in csv-parse

Regular Expression Denial of Service (ReDoS) in lodash

Parse Server has Regular Expression Denial of Service (ReDoS) via `$regex` query in LiveQuery

@fastify/express has a middleware authentication bypass via URL normalization gaps (duplicate slashes and semicolons)

AWS Lambda parser is vulnerable to Regular Expression Denial of Service

Malicious code in icims-express-dot-engine (npm)

angular vulnerable to regular expression denial of service (ReDoS)

Regular Expression Denial of Service in bleach

steal vulnerable to Regular Expression Denial of Service via input variable

Malicious code in azure-web-pubsub-express (npm)

express-cart allows any user to create an admin user

string-kit Inefficient Regular Expression Complexity vulnerability

is-url Inefficient Regular Expression Complexity vulnerability

SheetJS Regular Expression Denial of Service (ReDoS)

Remote code execution in mongo-express

skeemas Inefficient Regular Expression Complexity vulnerability

regular expression denial of service (ReDoS)

n8n Unsafe Workflow Expression Evaluation Allows Remote Code Execution

Validation bypass in frourio-express

Regular Expression Denial of Service in ua-parser-js

Regular Expression Denial of Service in ansi2html

Regular expression denial of service in forms

Improperly Controlled Modification of Dynamically-Determined Object Attributes in express-mock-middleware

mel-spintax has Inefficient Regular Expression Complexity

robots-txt-guard Inefficient Regular Expression Complexity vulnerability

Authorization bypass in express-jwt

Regular Expression Denial of Service in Headers

MooTools Regular Expression Denial of Service

brace-expansion Regular Expression Denial of Service vulnerability

Malicious code in create-ot-express-app (npm)

Moment.js vulnerable to Inefficient Regular Expression Complexity

n8n has Unauthenticated Expression Evaluation via Form Node

Regular Expression Denial of Service (ReDoS) in ua-parser-js

terminal-kit Inefficient Regular Expression Complexity vulnerability

jsPDF Bypass Regular Expression Denial of Service (ReDoS)

inflect vulnerable to Inefficient Regular Expression Complexity

Regular expression denial of service in react-native

Regular Expression Denial of Service in semver

SandboxJS: Stack overflow DoS via deeply nested expressions in recursive descent parser

Regular Expression Denial of Service in negotiator

URL Redirection to Untrusted Site ('Open Redirect') in express-openid-connect

Regular Expression Denial of Service (ReDoS) in @eslint/plugin-kit

Regular Expression Denial of Service (ReDoS)

Vega XSS via expression abusing vlSelectionTuples function array map calls in environments with satisfactory function gadgets in the global scope

@octokit/request-error has a Regular Expression in index that Leads to ReDoS Vulnerability Due to Catastrophic Backtracking

loader-utils is vulnerable to Regular Expression Denial of Service (ReDoS) via url variable

Regular Expression Denial of Service (ReDoS) in micromatch

Regular Expression Denial of Service in hosted-git-info

semver-regex Regular Expression Denial of Service (ReDOS)

Regular expression denial of service in codemirror

Regular expression Denial of Service in @progfay/scrapbox-parser

Malicious code in sync-express (npm)

Vega Expression Language `scale` expression function Cross Site Scripting

express-rate-limit: IPv4-mapped IPv6 addresses bypass per-client rate limiting on servers with dual-stack network

Session fixation in express-openid-connect

node-fetch Inefficient Regular Expression Complexity

Regular Expression Denial of Service in postcss

Malicious code in express-starter-template (npm)

semver vulnerable to Regular Expression Denial of Service

Inefficient Regular Expression Complexity in marked

tmpl vulnerable to Inefficient Regular Expression Complexity which may lead to resource exhaustion

Regular Expression Denial of Service in marked

Malicious code in bool-expressions (npm)

Regular Expression Denial of Service in fresh

Duplicate Advisory: Regular Expression Denial of Service in braces

Malicious code in vscode-smoketest-express (npm)

Cross-Site Request Forgery in express-cart

Regular Expression Denial-of-Service in npm schema-inspector

@sideway/formula contains Regular Expression Denial of Service (ReDoS) Vulnerability

Malicious code in iifl_express_middleware (npm)

Regular expression deinal of service in express-validators

@adobe/css-tools Improper Input Validation and Inefficient Regular Expression Complexity

Denial of Service (DoS) in mongo-express

axios Inefficient Regular Expression Complexity vulnerability

Inefficient Regular Expression Complexity in shescape

Regular Expression Denial of Service in timespan

jquery-validation Regular Expression Denial of Service due to arbitrary input to url2 method

Malicious code in express-request-ip (npm)

Regular expression denial of service in devcert

JSONata expression can pollute the "Object" prototype

Signal K Server has an Unauthenticated Regular Expression Denial of Service (ReDoS) via WebSocket Subscription Paths

Regular expression denial of service in scss-tokenizer

Regular Expression Denial of Service in hawk

Insecure template handling in Express-handlebars

glob-parent vulnerable to Regular Expression Denial of Service in enclosure regex

Regular Expression Denial of Service in path-parse

validate.js Regular Expression Denial of Service vulnerability

Remote Code Execution in Angular Expressions

@fastify/express vulnerable to Improper Handling of URL Encoding (Hex Encoding)

Regular Expression Denial of Service in simple-markdown

Regular Expression Denial of Service in websocket-extensions (NPM package)

Polynomial regular expression used on uncontrolled data in nitrado.js

Regular Expression Denial of Service in minimatch

mime Regular Expression Denial of Service when MIME lookup performed on untrusted user input

Regular Expression Denial of Service (ReDoS) in Prism

Malicious code in ultimates-express (npm)

Regular Expression Denial of Service in simple-markdown

express-cart unrestricted file upload vulnerability

@adobe/css-tools Regular Expression Denial of Service (ReDOS) while Parsing CSS

Malicious code in transform-member-expression-literals (npm)

Meteor Affected By Inefficient Regular Expression Complexity

Regular Expression Denial of Service in validator

Regular Expression Denial of Service in jquery-validation

Malicious code in swagger-express-evaluator (npm)

uap-core Regular Expression Denial of Service issue

Regular Expression Denial of Service in string package

Regular Expression Denial of Service in riot-compiler

is_js vulnerable to Regular Expression Denial of Service

CKEditor 5 Markdown plugin Regular expression Denial of Service

Regular expression denial of service in @absolunet/kafe

Regular Expression Denial of Service in jsoneditor

express-xss-sanitizer vulnerable to Prototype Pollution via allowedTags attribute

Regular Expression Denial of Service (ReDoS)

Inefficient Regular Expression Complexity in handsontable

Malicious code in helper-member-expression-to-functions (npm)

Regular Expression Denial of Service in parsejson

Regular Expression Denial of Service in markdown

@fastify/express's middleware path doubling causes authentication bypass in child plugin scopes

Malicious code in internal_crypto_express_package (npm)

Malicious code in express-cronjs (npm)

http-cache-semantics vulnerable to Regular Expression Denial of Service

Regular Expression Denial of Service in content

Malicious code in pro-express (npm)

Malicious code in overstock-health-express (npm)

Regular Expression Denial of Service in papaparse

Regular Expression Denial of Service in slug

Servify-express rate limit issue

express-xss-sanitizer has an unbounded recursion depth

Malicious code in env-cli-express (npm)

MathJax Regular expression Denial of Service (ReDoS)

Inefficient Regular Expression Complexity in vuelidate

Duplicate Advisory: Regular Expression Denial of Service in simple-markdown

@eslint/plugin-kit is vulnerable to Regular Expression Denial of Service attacks through ConfigCommentParser

Malicious code in @antstackio/express-graphql-proxy (npm)

Malicious code in express-my-error-handler (npm)

Regular Expression Denial of Service (ReDoS)

angular vulnerable to regular expression denial of service via the angular.copy() utility

steal Inefficient Regular Expression Complexity vulnerability via string variable

@octokit/request has a Regular Expression in fetchWrapper that Leads to ReDoS Vulnerability Due to Catastrophic Backtracking

Malicious code in expressyession (npm)

Regular Expression Denial of Service in highcharts

Inefficient Regular Expression Complexity in koa

Luxon Inefficient Regular Expression Complexity vulnerability

Inefficient Regular Expression Complexity in taro

Malicious code in expressjs-lint (npm)

Terser insecure use of regular expressions leads to ReDoS

jspdf vulnerable to Regular Expression Denial of Service (ReDoS)

Malicious code in express-4.x-passport-snapchat-example (npm)

prismjs Regular Expression Denial of Service vulnerability

Regular Expression Denial of Service in tough-cookie

Angular Expressions - Remote Code Execution

taro-css-to-react-native Regular Expression Denial of Service vulnerability

Regular expression denial of service in markdown-link-extractor

Malicious code in swagger-express-cli (npm)

Malicious code in express-configer (npm)

@hapi/content: Regular Expression Denial of Service (ReDoS) in HTTP header parsing

Malicious code in brightspot-express (npm)

Malicious code in express-api-sync (npm)

minimatch ReDoS: nested *() extglobs generate catastrophically backtracking regular expressions

markdown-it is has a Regular Expression Denial of Service (ReDoS)

pm2 Regular Expression Denial of Service vulnerability

ua-parser-js Regular Expression Denial of Service vulnerability

Marked allows Regular Expression Denial of Service (ReDoS) attacks

Malicious code in web-pubsub-express (npm)

Inefficient Regular Expression Complexity in marked

Malicious code in walmart-express (npm)

Malicious code in express-validator-plugin (npm)

@vue/cli-plugin-pwa Regular Expression Denial of Service vulnerability

XSS via Angular Expression in ag-grid

Regular Expression Denial of Service (ReDoS) in braces

cookiejar Regular Expression Denial of Service via Cookie.parse function

Malicious code in bfx-report-express (npm)

email-existence Inefficient Regular Expression Complexity vulnerability

Regular Expression Denial of Service in browserslist

Inefficient Regular Expression Complexity in validator.js

Malicious code in falcor-express-demo (npm)

Regular Expression Denial of Service in npm-user-validate

Malicious code in swagger-cli-express (npm)

Inefficient Regular Expression Complexity in nth-check

Malicious code in node-express-demo (npm)

Insecure template handling in express-hbs

Malicious code in express-dompurify (npm)

Malicious code in express-security-policy (npm)

Malicious code in colors_express (npm)

Malicious code in express-session-vailidator (npm)

Malicious code in express_update (npm)

Malicious code in express-groups-routes (npm)

Malicious code in express-http-geobase (npm)

Malicious code in express-http-langdetect (npm)

Malicious code in express-blackbox (npm)

Malicious code in express-checkout-sdk (npm)

Malicious code in express-lastest (npm)

Malicious code in express-metrics-zmarta (npm)

Malicious code in express-uatraits (npm)

Malicious code in express-yandexuid (npm)

Malicious code in express-js-web (npm)

Malicious code in express-soaps (npm)

Malicious code in example-nodejs-express (npm)

Malicious code in express-session-validator (npm)

Malicious code in express-auth-basic (npm)

Malicious code in syntax-do-expressions (npm)

Malicious code in env_express (npm)

Malicious code in express-jscookie (npm)

Regular Expression Denial of Service in Handlebars

Malicious code in cta-onboard-express (npm)

Malicious code in express-configers (npm)

Malicious code in paypal-express (npm)

Malicious code in @trigo/bool-expressions (npm)

Malicious code in expressautomations (npm)

Malicious code in fc-expressions (npm)

Malicious code in express-ranges (npm)

Malicious code in express-security-suite-2024 (npm)

Malicious code in express-sessions-id (npm)

Malicious code in braintree_express_example (npm)

Malicious code in geocaching-express-account-middleware (npm)

Regular expression denial of service in url-regex

Malicious code in express-exp (npm)

Malicious code in express-core-cache (npm)

Regular Expression Denial of Service (ReDOS)

Regular Expression Denial of Service in sshpk

angular vulnerable to regular expression denial of service via the $resource service

Duplicate Advisory: Privilege Escalation in express-cart

Knwl.js Regular Expression Denial of Service vulnerability

path-to-regexp outputs backtracking regular expressions

Private Data Disclosure in express-restify-mongoose

uri-template-lite Regular Expression Denial of Service

Regular Expression Denial of Service in debug

Regular Expression Denial of Service in decamelize

Regular expression Denial of Service in multiple packages

n8n Vulnerable to Remote Code Execution via Expression Injection

n8n: Expression Sandbox Escape Leads to RCE

Authentication Bypass by Spoofing in express-cart

Malicious code in express-authgen (npm)

Malicious code in express-gueues (npm)

Malicious code in express-http-validator (npm)

Malicious code in express-lists-routes (npm)

Malicious code in dotenv-express (npm)

Malicious code in env-express (npm)

Malicious code in env-express-cli (npm)

Malicious code in express-xmlrequest (npm)