node-express (Ubuntu:Pro:18.04:LTS) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the Ubuntu:Pro:18.04:LTS package node-express, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (2)

• CVE-2024-9266 — CVSS 4.7 (medium): URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Express. This vulnerability affects the use of the Express Response…
• CVE-2024-10491 — CVSS 4.0 (medium): A vulnerability has been identified in the Express response.links function, allowing for arbitrary resource injection in the Link header…