Expressjs Serve-Static vulnerabilities

1 known vulnerability affecting expressjs/serve-static.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

MEDIUM1

Vulnerabilities

Page 1 of 1

CVE-2024-43800MEDIUMCVSS 4.7fixed in 1.16.0v>= 2.0.0, < 2.1.02024-09-10

CVE-2024-43800 [MEDIUM] CWE-79 CVE-2024-43800: serve-static serves static files. serve-static passes untrusted user input - even after sanitizing i serve-static serves static files. serve-static passes untrusted user input - even after sanitizing it - to redirect() may execute untrusted code. This issue is patched in serve-static 1.16.0.