p PatchFirst

CVE-2024-9266

CVE-2024-9266 · Open Redirect

This page contains facts from public vulnerability sources. Check the original advisory before updating.

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Express. This vulnerability affects the use of the Express Response object. This issue impacts Express: from 3.4.5 before 4.0.0.

CVSS 4.7 · Medium · EPSS 0.5% · Fix available

Published
Updated

Stack: node

Affected products and versions

  • express

    Versions
    • ≥ 3.4.5, < 4.0.0: Affected (semver)

    Update to 4.0.0

  • express npm

    Affected ranges
    • SEMVER: ≥ 3.4.5, < 4.0.0-rc1

    Update to 4.0.0-rc1

Original sources

Check your server →