expressjs

Records22All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high16CVSS 7.0–8.9

Exploited now

expressjs records in CISA KEV

No expressjs vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Multer 9 records MEDIUM Basic-auth-connect 1 record LOW Method-override 1 record LOW

Records

1 record in Method-override · all components

TI-2017-11855 CVE-2017-16136 · GHSA-qx2f-477c-35rq

Uncontrolled resource consumption in HackerOne method-override node module

LOW 35

method-override is a module used by the Express.js framework to let you use HTTP verbs such as PUT or DELETE in places where the client doesn't support it.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01196 Published 2018-06-07 Fixed in 2.3.10 CWE-400

Open these records in search →

Critical	0
High	16
Medium	5
Low	1
No CVSS	0