- How many CVEs does expressjs have?
- expressjs has 33 published CVE records since 2015, including 20 in the last two years.
- How many expressjs CVEs are in CISA KEV?
- None of expressjs's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
- Which expressjs products have the most CVEs?
- The expressjs products with the most published CVEs are multer, express, morgan, body-parser, serve-static.
- What are the most common weakness types in expressjs CVEs?
- expressjs's CVEs most often map to these CWE weakness types: CWE-400 (Uncontrolled Resource Consumption), CWE-248 (Uncaught Exception), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-117 (Improper Output Neutralization for Logs).
- Are there public exploits for expressjs vulnerabilities?
- Yes — 6 of expressjs's CVEs have a known public exploit.
- How many critical expressjs vulnerabilities are there?
- expressjs has 1 critical and 18 high-severity CVEs.
- What is the average severity of expressjs CVEs?
- The average CVSS base score across expressjs's scored CVEs is 6.5.