Express - vulnerabilities (CVEs)

3 CVEs in 1 products, 0 in the last 30 days, newest from 2026-03-22.

Products

• Express - 2 CVEs

Newest CVEs of Express

• CVE-2019-25612 - CVSS 8.5 (high), 2026-03-22: Admin Express 1.2.5.485 contains a local structured exception handling buffer overflow vulnerability that allows local attackers to execute arbitrary code by…
• CVE-2024-10491 - CVSS 5.3 (medium), 2024-10-29: A vulnerability has been identified in the Express response.links function, allowing for arbitrary resource injection in the Link header when unsanitized data…
• CVE-2014-6887 - CVSS 5.4 (medium), 2014-10-11: The EXPRESS (aka com.gpshopper.express.android) application 2.5.3 for Android does not verify X.509 certificates from SSL servers, which allows…