Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

22 records

Priority LOW 39

Impact: multer versions 1.0.0 through 2.1.1 and 3.0.0-alpha.1 are vulnerable to a Denial of Service via deeply nested field names in multipart form data.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00279 Published 2026-06-15 Partial fix · 2.2.0, 3.0.0-alpha.2 CWE-400
TI-2024-08602 CVE-2024-9266 · GHSA-jj78-5fmv-mv28

Open redirect in expressjs express

Priority MEDIUM 55

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Express.

CVSS 3.1MEDIUM 4.7 Network No auth User interaction EPSS 0.0046 Published 2024-10-03 Partial fix · 4.0.0, 4.0.0-rc1 CWE-601
TI-2024-19223 CVE-2024-29041 · GHSA-rv95-896h-c2vc

Express.js Open Redirect in malformed URLs

Priority LOW 29

Express.js minimalist web framework for node.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00786 Published 2024-03-25 Partial fix · 4.19.0, 5.0.0-beta.3 +1 CWE-1286