express-gateway (npm) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the npm package express-gateway, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (2)

• CVE-2025-9095 — CVSS 3.5 (low): A flaw has been found in ExpressGateway express-gateway up to 1.16.10. This issue affects some unknown processing in the library…
• CVE-2025-9096 — CVSS 3.5 (low): A vulnerability has been found in ExpressGateway express-gateway up to 1.16.10. Affected is an unknown function in the library…