medium4.7
CVE-2024-9266
Express Open Redirect vulnerability
Impact
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Express. This vulnerability affects the use of the Express Response object. This issue impacts Express: from 3.4.5 before 4.0.0-rc1.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| npm | express | >= 3.4.5, < 4.0.0-rc1 | 4.0.0-rc1 |