expressjs kayıtları
expressjs üreticisine ait 12 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %100
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-400 Uncontrolled Resource Consumption4
- CWE-459 Incomplete Cleanup2
- CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')1
- CWE-601 URL Redirection to Untrusted Site ('Open Redirect')1
- CWE-674 Uncontrolled Recursion1
- CWE-208 Observable Timing Discrepancy1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
12 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
34İzleyin | CVE-2026-3520İstismar yok | Multer vulnerable to Denial of Service via uncontrolled recursionexpressjs · multer · CWE-674 | Yüksek8,7 | — | %1,0 | 4 Mar 2026 |
34İzleyin | CVE-2026-3304Kavram kanıtı | Multer vulnerable to Denial of Service via incomplete cleanupexpressjs · multer · CWE-459 | Yüksek8,7 | — | %0,9 | 27 Şub 2026 |
34İzleyin | CVE-2026-2359İstismar yok | Multer vulnerable to Denial of Service via resource exhaustionexpressjs · multer · CWE-772 | Yüksek8,7 | — | %0,7 | 27 Şub 2026 |
34İzleyin | CVE-2024-47178İstismar yok | basic-auth-connect's callback uses time unsafe string comparisonexpressjs · basic-auth-connect · CWE-208 | Yüksek8,7 | — | %0,5 | 30 Eyl 2024 |
30İzleyin | CVE-2017-16136İstismar yok | method-override is a module used by the Express.js framework to let you use HTTP verbs such as PUT or DELETE in places where the client doesexpressjs · method-override · CWE-400 | Yüksek7,5 | — | %1,2 | 6 Haz 2018 |
30İzleyin | CVE-2026-82333İstismar yok | multer vulnerable to Denial of Service via oversized array index in field namesexpressjs · multer · CWE-400 | Yüksek7,5 | — | %0,5 | 28 Ağu 2026 |
30İzleyin | CVE-2026-5038İstismar yok | multer vulnerable to Denial of Service via incomplete cleanup of aborted uploadsexpressjs · multer · CWE-459 | Yüksek7,5 | — | %0,5 | 15 Haz 2026 |
30İzleyin | CVE-2026-5079İstismar yok | multer vulnerable to Denial of Service via deeply nested field namesexpressjs · multer · CWE-400 | Yüksek7,5 | — | %0,5 | 15 Haz 2026 |
30İzleyin | CVE-2026-77078Kavram kanıtı | multer vulnerable to Denial of Service via crafted multipart field namesexpressjs · multer · CWE-248 | Yüksek7,5 | — | %0,5 | 28 Ağu 2026 |
30İzleyin | CVE-2026-77037İstismar yok | multer vulnerable to Denial of Service via file descriptor leak on aborted uploadsexpressjs · multer · CWE-400 | Yüksek7,5 | — | %0,3 | 28 Ağu 2026 |
18İzleyin | CVE-2024-9266İstismar yok | URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Express.expressjs · express · CWE-601 | Orta4,7 | — | %0,5 | 3 Eki 2024 |
14İzleyin | CVE-2026-77063İstismar yok | multer vulnerable to file size limit bypass via async fileFilter race conditionexpressjs · multer · CWE-362 | Düşük3,7 | — | %0,2 | 28 Ağu 2026 |
- CVE-2026-352034İzleyin
Multer vulnerable to Denial of Service via uncontrolled recursion
YüksekCVSS 8,7İstismar yokEPSS %1expressjs · multer4 Mar 2026
- CVE-2026-330434İzleyin
Multer vulnerable to Denial of Service via incomplete cleanup
YüksekCVSS 8,7Kavram kanıtıEPSS %1expressjs · multer27 Şub 2026
- CVE-2026-235934İzleyin
Multer vulnerable to Denial of Service via resource exhaustion
YüksekCVSS 8,7İstismar yokEPSS %1expressjs · multer27 Şub 2026
- CVE-2024-4717834İzleyin
basic-auth-connect's callback uses time unsafe string comparison
YüksekCVSS 8,7İstismar yokEPSS %1expressjs · basic-auth-connect30 Eyl 2024
- CVE-2017-1613630İzleyin
method-override is a module used by the Express.js framework to let you use HTTP verbs such as PUT or DELETE in places where the client does
YüksekCVSS 7,5İstismar yokEPSS %1expressjs · method-override6 Haz 2018
- CVE-2026-8233330İzleyin
multer vulnerable to Denial of Service via oversized array index in field names
YüksekCVSS 7,5İstismar yokEPSS %0expressjs · multer28 Ağu 2026
- CVE-2026-503830İzleyin
multer vulnerable to Denial of Service via incomplete cleanup of aborted uploads
YüksekCVSS 7,5İstismar yokEPSS %0expressjs · multer15 Haz 2026
- CVE-2026-507930İzleyin
multer vulnerable to Denial of Service via deeply nested field names
YüksekCVSS 7,5İstismar yokEPSS %0expressjs · multer15 Haz 2026
- CVE-2026-7707830İzleyin
multer vulnerable to Denial of Service via crafted multipart field names
YüksekCVSS 7,5Kavram kanıtıEPSS %0expressjs · multer28 Ağu 2026
- CVE-2026-7703730İzleyin
multer vulnerable to Denial of Service via file descriptor leak on aborted uploads
YüksekCVSS 7,5İstismar yokEPSS %0expressjs · multer28 Ağu 2026
- CVE-2024-926618İzleyin
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Express.
OrtaCVSS 4,7İstismar yokEPSS %0expressjs · express3 Eki 2024
- CVE-2026-7706314İzleyin
multer vulnerable to file size limit bypass via async fileFilter race condition
DüşükCVSS 3,7İstismar yokEPSS %0expressjs · multer28 Ağu 2026