`express`

Ecosystem:
npm

Package URL:
pkg:npm/express

Total PRs:
16,305 Dependabot PRs

Latest PR:
about 1 hour ago

Unique Repositories:
8,120 repositories

Unique Repos (30 days):
1,239 repositories

Security Advisories

No Charset in Content-Type Header in express

GHSA-gpvr-g6gh-9mc2 CVE-2014-6393 MODERATE published almost 7 years ago • updated 3 months ago

Vulnerable versions of express do not specify a charset field in the content-type header while displaying 400 level response messages. The lack of ...

Express ressource injection

GHSA-cm5g-3pgc-8rg4 CVE-2024-10491 MODERATE published 10 months ago • updated 21 days ago

A vulnerability has been identified in the Express response.links function, allowing for arbitrary resource injection in the Link header when unsan...

Express.js Open Redirect in malformed URLs

GHSA-rv95-896h-c2vc CVE-2024-29041 MODERATE published over 1 year ago • updated about 1 month ago

### Impact Versions of Express.js prior to 4.19.2 and pre-release alpha and beta versions before 5.0.0-beta.3 are affected by an open redirect vul...

Express Open Redirect vulnerability

GHSA-jj78-5fmv-mv28 CVE-2024-9266 LOW published 11 months ago • updated about 1 month ago

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Express. This vulnerability affects the use of the Express Response object. Th...

express vulnerable to XSS via response.redirect()

GHSA-qw6h-vgh9-j6wx CVE-2024-43796 LOW published 12 months ago • updated about 2 months ago

### Impact In express <4.20.0, passing untrusted user input - even after sanitizing it - to `response.redirect()` may execute untrusted code ### ...

Recent PRs

Bump the npm_and_yarn group across 1 directory with 21 updates

se2026/InstaPy #2

4.17.1 → 4.21.2 Minor PR

Merged about 1 hour ago

Bump cookie and express

ViniciusVon/allbooks-devops #9

4.18.2 → 4.21.2 Minor PR

Open about 3 hours ago

Bump serve-static and express

ViniciusVon/allbooks-devops #7

4.18.2 → 4.21.2 Minor PR

Open about 3 hours ago

Bump path-to-regexp and express

ViniciusVon/allbooks-devops #5

4.18.2 → 4.21.2 Minor PR

Open about 3 hours ago

Bump send and express

ViniciusVon/allbooks-devops #4

4.18.2 → 4.21.2 Minor PR

Open about 3 hours ago

Bump express from 4.21.2 to 5.1.0

dsp-testing/test-exclude-paths-npm #4

4.21.2 → 5.1.0 Major PR

Open about 3 hours ago

Bump path-to-regexp and express

typeweaver/ask-client #9

4.17.1 → 4.21.2 Minor PR

Open about 5 hours ago

Bump path-to-regexp and express

typeweaver/ask-server #13

4.17.1 → 4.21.2 Minor PR

Open about 5 hours ago

Bump send and express

typeweaver/ask-server #12

4.17.1 → 4.21.2 Minor PR

Open about 5 hours ago

Bump express from 4.17.1 to 4.20.0

typeweaver/ask-server #6

4.17.1 → 4.20.0 Minor PR

Closed about 5 hours ago 2 comments

Bump body-parser and express

typeweaver/ask-server #7

4.17.1 → 4.21.2 Minor PR

Open about 5 hours ago

Bump serve-static and express

typeweaver/tictactoe-express #10

4.17.1 → 4.21.2 Minor PR

Open about 5 hours ago

Bump body-parser and express

typeweaver/tictactoe-express #8

4.17.1 → 4.21.2 Minor PR

Open about 5 hours ago

Bump path-to-regexp and express

typeweaver/tictactoe-express #7

4.17.1 → 4.21.2 Minor PR

Open about 5 hours ago

Bump express from 4.17.1 to 4.20.0

typeweaver/tictactoe-express #5

4.17.1 → 4.20.0 Minor PR

Closed about 5 hours ago 1 comment

Bump cookie and express

jnadyr/allbooks #12

4.18.2 → 4.21.2 Minor PR

Merged about 6 hours ago

Bump serve-static and express

jnadyr/allbooks #7

4.18.2 → 4.21.2 Minor PR

Closed about 6 hours ago 1 comment

Bump send and express

jnadyr/allbooks #5

4.18.2 → 4.21.2 Minor PR

Open about 6 hours ago

Bump path-to-regexp and express

jnadyr/allbooks #6

4.18.2 → 4.21.2 Minor PR

Open about 6 hours ago

Bump send and express

mixpanel/npc-mixpanel #10

4.19.2 → 4.21.2 Minor PR

Open about 6 hours ago

Bump path-to-regexp and express

mixpanel/npc-mixpanel #8

4.19.2 → 4.21.2 Minor PR

Open about 6 hours ago

Bump express from 4.21.2 to 5.1.0

Annenberg-Grindr/nodejs #1

4.21.2 → 5.1.0 Major PR

Open about 7 hours ago

Bump express from 4.17.1 to 4.20.0

Dmitry221060/Miyuko-Nonoe #16

4.17.1 → 4.20.0 Minor PR

Open about 7 hours ago

chore(deps): bump express from 4.18.2 to 5.1.0 in /backend

b00nk3r/mbta-commuter-rail-planner #17

4.18.2 → 5.1.0 Major PR

Closed about 8 hours ago 1 comment

Bump the npm_and_yarn group across 1 directory with 2 updates

renan-org/repo-sample #39

4.18.2 → 4.21.2 Minor PR

Merged about 9 hours ago 1 comment

Bump the npm_and_yarn group across 1 directory with 2 updates

renan-org/repo-sample #38

4.18.2 → 4.21.2 Minor PR

Merged about 9 hours ago 1 comment

Bump the npm_and_yarn group across 1 directory with 2 updates

renan-org/repo-sample #37

4.18.2 → 4.21.2 Minor PR

Open about 9 hours ago

Bump the npm_and_yarn group across 1 directory with 2 updates

renan-org/repo-sample #36

4.18.2 → 4.21.2 Minor PR

Open about 9 hours ago 1 comment

Bump express from 4.18.2 to 4.20.0 in the npm_and_yarn group across 1 directory

renan-org/repo-sample #35

4.18.2 → 4.20.0 Minor PR

Closed about 9 hours ago 1 comment

Bump path-to-regexp and express

toddjudd/snap-n-sketch #7

4.17.1 → 4.21.2 Minor PR

Open about 10 hours ago

Bump express from 4.19.2 to 4.20.0

Ajayduddi/My-Backend-Services #9

4.19.2 → 4.20.0 Minor PR

Open about 10 hours ago 1 comment

chore(deps): bump express and @types/express

kashw2/Fleet-of-the-Faithful-Knights #3043

4.21.0 → 5.1.0 Major PR

Merged about 10 hours ago

chore(deps): bump the npm_and_yarn group across 1 directory with 8 updates

palashgdev/tailwind-nextjs #34

4.19.2 → 4.21.2 Minor PR

Open about 11 hours ago 1 comment

Bump path-to-regexp and express

HarryAlvarado28/Project-TDD-JavaScript #35

4.19.2 → 4.21.2 Minor PR

Open about 12 hours ago

chore(deps): bump express from 4.21.2 to 5.1.0

s8ken/YCQ-Sonate #13

4.21.2 → 5.1.0 Major PR

Open about 12 hours ago 1 comment

Bump the npm_and_yarn group across 2 directories with 28 updates

rionnaldi/cyfrin-security-and-auditing-portfolio #1

4.18.2 → 4.21.2 Minor PR

Open about 13 hours ago

chore(bot): bump the production-dependencies group in /bot with 3 updates

Makoto041/line-kakeibo #20

4.21.2 → 5.1.0 Major PR

Open about 13 hours ago 2 comments

Bump cookie and express in /client

dmatthe4952/advReactReduxTraining #7

4.17.1 → 4.21.2 Minor PR

Open about 13 hours ago 1 comment

Bump path-to-regexp and express in /client

dmatthe4952/advReactReduxTraining #8

4.17.1 → 4.21.2 Minor PR

Closed about 13 hours ago 1 comment

Bump send and express in /client

dmatthe4952/advReactReduxTraining #6

4.17.1 → 4.21.2 Minor PR

Closed about 13 hours ago 1 comment

Bump cookie and express

Engineering-Research-and-Development/iotagent-opcua #143

4.20.0 → 4.21.2 Minor PR

Open about 14 hours ago

Bump serve-static and express

Ajayduddi/My-Backend-Services #7

4.19.2 → 4.21.2 Minor PR

Open about 17 hours ago

Bump send and express

Ajayduddi/My-Backend-Services #6

4.19.2 → 4.21.2 Minor PR

Open about 17 hours ago 2 comments

Bump express from 4.19.2 to 4.20.0

Ajayduddi/My-Backend-Services #4

4.19.2 → 4.20.0 Minor PR

Open about 17 hours ago

Bump body-parser and express

Ajayduddi/My-Backend-Services #5

4.19.2 → 4.21.2 Minor PR

Open about 17 hours ago

Bump path-to-regexp and express

Ajayduddi/My-Backend-Services #2

4.19.2 → 4.21.2 Minor PR

Closed about 17 hours ago 2 comments

Bump cookie and express

Ajayduddi/My-Backend-Services #3

4.19.2 → 4.21.2 Minor PR

Merged about 17 hours ago 1 comment

Bump express from 4.18.0 to 4.21.2 in /hello-wasm/site

u-sho/myFirstWasmRust #11

4.18.0 → 4.21.2 Minor PR

Closed about 21 hours ago 2 comments

Bump serve-static and express in /hello-wasm/site

u-sho/myFirstWasmRust #8

4.18.0 → 4.21.2 Minor PR

Open about 21 hours ago

Bump send and express in /hello-wasm/site

u-sho/myFirstWasmRust #9

4.18.0 → 4.21.2 Minor PR

Open about 21 hours ago

Package Details

Name:	`express`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/express`
JSON API:	View JSON

Security Advisories

5

Active advisories

MODERATE 3

LOW 2

View All npm Advisories

Package Information

Description:

Fast, unopinionated, minimalist web framework

Repository:	https://github.com/expressjs/express
Homepage:	https://expressjs.com/
Latest Release:	`5.1.0` 5 months ago
Dependent Repos:	1,853,938
Dependent Packages:	93,237
Downloads:	187,306,052
Ranking:	Top 0.0174% by dependent repos Top 0.0112% by downloads Top 0.001% by dependent pkgs

PR Status

Open 7,460 (45.9%)

Merged 2,183 (13.4%)

Closed 4,662 (28.7%)

PR Types

Removal 12 (0.1%)

Minor 11,108 (68.3%)

Major 1,764 (10.8%)

Patch 1,147 (7.1%)