Express security incidents
Recent advisories touching Express apps — searchable, enriched with exploit probability and affected versions.
Malicious code in @onereach/regular-expressions (npm)
Malicious code in @onereach/regular-expressions (npm)
Malicious code in @onereach/regular-expressions-test (npm)
Malicious code in @onereach/regular-expressions-test (npm)
Malicious code in @onereach/expression-components (npm)
Malicious code in @onereach/expression-components (npm)
Malicious code in express-wrapper (npm)
Malicious code in express-wrapper (npm)
Malicious code in express.jd (npm)
Malicious code in express.jd (npm)
Malicious code in express-sequelize-wrapper (npm)
Malicious code in express-sequelize-wrapper (npm)
Malicious code in express-bubble (npm)
Malicious code in express-bubble (npm)
Malicious code in express.ja (npm)
Malicious code in express.ja (npm)
Malicious code in express-test-dependency (npm)
Malicious code in express-test-dependency (npm)
Malicious code in express-mongo-limit (npm)
Malicious code in express-mongo-limit (npm)
Spring Framework Algorithmic Denial of Service via SpEL Expressions
Spring Framework Algorithmic Denial of Service via SpEL Expressions
org.springframework:spring-expression: 7.0.0 → 7.0.8
Spring Framework Arbitrary Method Invocation in SpEL Expressions
Spring Framework Arbitrary Method Invocation in SpEL Expressions
org.springframework:spring-expression: 7.0.0 → 7.0.8
Spring Framework Denial of Service via Unbounded Cache in SpEL
Spring Framework Denial of Service via Unbounded Cache in SpEL
org.springframework:spring-expression: 7.0.0 → 7.0.8
Spring Framework Denial of Service via Integer Overflow in SpEL Expressions
Spring Framework Denial of Service via Integer Overflow in SpEL Expressions
org.springframework:spring-expression: all versions
Red Hat JBoss RichFaces Framework Expression Language Injection Vulnerability
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14667; https://nvd.nist.gov/vuln/detail/CVE-2018-14667
MiCollab, MiVoice Business Express Access Control Vulnerability
https://nvd.nist.gov/vuln/detail/CVE-2022-26143
Inefficient Regular Expression Complexity in marked
Inefficient Regular Expression Complexity in marked
Inefficient Regular Expression Complexity in marked
Inefficient Regular Expression Complexity in marked
MongoDB mongo-express Remote Code Execution Vulnerability
https://nvd.nist.gov/vuln/detail/CVE-2019-10758
Tooling for Express
Some links are affiliate links — HackTribune may earn a commission at no extra cost to you.