OpenJS Foundation Express 5.0.0 Beta 3 for Node.js
Approved changes feed: RSS · Atom
cpe:2.3:a:openjsf:express:5.0.0:beta3:*:*:*:node.js:*:*
part: a version: 5.0.0 update: beta3
| Vendor | Openjsf (e371b9eb-ab86-58dc-866f-7af8b12292ef) |
|---|---|
| Product | Express (6237d38e-999e-5748-8dcf-29e89cf0ec1f) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | node.js |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/node-express |
purl2cpe | 2026-06-01 10:14:22.103988 |
pkg:deb/ubuntu/node-express |
purl2cpe | 2026-06-01 10:14:22.103989 |
pkg:github/expressjs/express |
purl2cpe | 2026-06-01 10:14:22.103990 |
pkg:maven/org.webjars.npm/express |
purl2cpe | 2026-06-01 10:14:22.103992 |
pkg:npm/express |
purl2cpe | 2026-06-01 10:14:22.103993 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-43796 |
vulnerable | 2026-06-08 06:45:53.061883 |
express vulnerable to XSS via response.redirect()
MEDIUM (5)
Express.js minimalist web framework for node. In express < 4.20.0, passing untrusted user input - even after sanitizing it - to response.redirect() may execute untrusted code. This issue is patched in express 4.20.0.
Published: 2024-09-10T14:36:27.380Z
Updated: 2024-09-10T15:58:45.956Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.