Total vulnerabilities in the database
Express.js minimalist web framework for node. In express < 4.20.0, passing untrusted user input - even after sanitizing it - to response.redirect() may execute untrusted code. This issue is patched in express 4.20.0.
| Software | From | Fixed in |
|---|---|---|
| openjsf / express | - | 4.20.0 |
| openjsf / express | 5.0.0-alpha1 | 5.0.0-alpha1.x |
| openjsf / express | 5.0.0-alpha2 | 5.0.0-alpha2.x |
| openjsf / express | 5.0.0-alpha3 | 5.0.0-alpha3.x |
| openjsf / express | 5.0.0-alpha4 | 5.0.0-alpha4.x |
| openjsf / express | 5.0.0-alpha5 | 5.0.0-alpha5.x |
| openjsf / express | 5.0.0-alpha6 | 5.0.0-alpha6.x |
| openjsf / express | 5.0.0-alpha7 | 5.0.0-alpha7.x |
| openjsf / express | 5.0.0-alpha8 | 5.0.0-alpha8.x |
| openjsf / express | 5.0.0-beta2 | 5.0.0-beta2.x |
| openjsf / express | 5.0.0-beta1 | 5.0.0-beta1.x |
| openjsf / express | 5.0.0-beta3 | 5.0.0-beta3.x |