Django REST framework

Lookup for vulnerabilities affecting packages.

Vulnerability_id VCID-xnw8-djyq-1uhk

Summary

Express Open Redirect vulnerability
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Express. This vulnerability affects the use of the Express Response object. This issue impacts Express: from 3.4.5 before 4.0.0-rc1.

Aliases

alias	CVE-2024-9266

alias	GHSA-jj78-5fmv-mv28

Fixed_packages

url	pkg:deb/debian/node-express@0?distro=trixie
purl	pkg:deb/debian/node-express@0?distro=trixie
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:deb/debian/node-express@0%3Fdistro=trixie

url pkg:deb/debian/node-express@4.17.1-3?distro=trixie

purl pkg:deb/debian/node-express@4.17.1-3?distro=trixie

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-axqm-hk9c-53gn

vulnerability	VCID-fevu-q6th-9beb

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/node-express@4.17.1-3%3Fdistro=trixie

url pkg:deb/debian/node-express@4.18.2%2B~4.17.14-1?distro=trixie

purl pkg:deb/debian/node-express@4.18.2%2B~4.17.14-1?distro=trixie

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-axqm-hk9c-53gn

vulnerability	VCID-fevu-q6th-9beb

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/node-express@4.18.2%252B~4.17.14-1%3Fdistro=trixie

url	pkg:deb/debian/node-express@4.21.2%2B~cs8.36.27-2?distro=trixie
purl	pkg:deb/debian/node-express@4.21.2%2B~cs8.36.27-2?distro=trixie
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:deb/debian/node-express@4.21.2%252B~cs8.36.27-2%3Fdistro=trixie

url	pkg:deb/debian/node-express@5.1.0%2B~cs12.3.3-1?distro=trixie
purl	pkg:deb/debian/node-express@5.1.0%2B~cs12.3.3-1?distro=trixie
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:deb/debian/node-express@5.1.0%252B~cs12.3.3-1%3Fdistro=trixie

url pkg:npm/express@4.0.0-rc1

purl pkg:npm/express@4.0.0-rc1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-8jr1-tn77-dfds

vulnerability	VCID-axqm-hk9c-53gn

vulnerability	VCID-bcuh-2e2c-53gy

vulnerability	VCID-fevu-q6th-9beb

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/express@4.0.0-rc1

Affected_packages

url pkg:npm/express@3.4.5

purl pkg:npm/express@3.4.5

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-8jr1-tn77-dfds

vulnerability	VCID-axqm-hk9c-53gn

vulnerability	VCID-bcuh-2e2c-53gy

vulnerability	VCID-fevu-q6th-9beb

vulnerability	VCID-hyrv-e649-23fr

vulnerability	VCID-xnw8-djyq-1uhk

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/express@3.4.5

url pkg:npm/express@3.4.6

purl pkg:npm/express@3.4.6

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-8jr1-tn77-dfds

vulnerability	VCID-axqm-hk9c-53gn

vulnerability	VCID-bcuh-2e2c-53gy

vulnerability	VCID-fevu-q6th-9beb

vulnerability	VCID-hyrv-e649-23fr

vulnerability	VCID-xnw8-djyq-1uhk

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/express@3.4.6

url pkg:npm/express@3.4.7

purl pkg:npm/express@3.4.7

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-8jr1-tn77-dfds

vulnerability	VCID-axqm-hk9c-53gn

vulnerability	VCID-bcuh-2e2c-53gy

vulnerability	VCID-fevu-q6th-9beb

vulnerability	VCID-hyrv-e649-23fr

vulnerability	VCID-xnw8-djyq-1uhk

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/express@3.4.7

url pkg:npm/express@3.4.8

purl pkg:npm/express@3.4.8

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-8jr1-tn77-dfds

vulnerability	VCID-axqm-hk9c-53gn

vulnerability	VCID-bcuh-2e2c-53gy

vulnerability	VCID-fevu-q6th-9beb

vulnerability	VCID-hyrv-e649-23fr

vulnerability	VCID-xnw8-djyq-1uhk

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/express@3.4.8

url pkg:npm/express@3.5.0

purl pkg:npm/express@3.5.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-8jr1-tn77-dfds

vulnerability	VCID-axqm-hk9c-53gn

vulnerability	VCID-bcuh-2e2c-53gy

vulnerability	VCID-fevu-q6th-9beb

vulnerability	VCID-hyrv-e649-23fr

vulnerability	VCID-xnw8-djyq-1uhk

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/express@3.5.0

url pkg:npm/express@3.5.1

purl pkg:npm/express@3.5.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-8jr1-tn77-dfds

vulnerability	VCID-axqm-hk9c-53gn

vulnerability	VCID-bcuh-2e2c-53gy

vulnerability	VCID-fevu-q6th-9beb

vulnerability	VCID-hyrv-e649-23fr

vulnerability	VCID-xnw8-djyq-1uhk

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/express@3.5.1

url pkg:npm/express@3.5.2

purl pkg:npm/express@3.5.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-8jr1-tn77-dfds

vulnerability	VCID-axqm-hk9c-53gn

vulnerability	VCID-bcuh-2e2c-53gy

vulnerability	VCID-fevu-q6th-9beb

vulnerability	VCID-hyrv-e649-23fr

vulnerability	VCID-xnw8-djyq-1uhk

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/express@3.5.2

url pkg:npm/express@3.5.3

purl pkg:npm/express@3.5.3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-8jr1-tn77-dfds

vulnerability	VCID-axqm-hk9c-53gn

vulnerability	VCID-bcuh-2e2c-53gy

vulnerability	VCID-fevu-q6th-9beb

vulnerability	VCID-hyrv-e649-23fr

vulnerability	VCID-xnw8-djyq-1uhk

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/express@3.5.3

url pkg:npm/express@3.6.0

purl pkg:npm/express@3.6.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-8jr1-tn77-dfds

vulnerability	VCID-axqm-hk9c-53gn

vulnerability	VCID-bcuh-2e2c-53gy

vulnerability	VCID-fevu-q6th-9beb

vulnerability	VCID-hyrv-e649-23fr

vulnerability	VCID-xnw8-djyq-1uhk

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/express@3.6.0

url pkg:npm/express@3.7.0

purl pkg:npm/express@3.7.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-8jr1-tn77-dfds

vulnerability	VCID-axqm-hk9c-53gn

vulnerability	VCID-bcuh-2e2c-53gy

vulnerability	VCID-fevu-q6th-9beb

vulnerability	VCID-hyrv-e649-23fr

vulnerability	VCID-xnw8-djyq-1uhk

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/express@3.7.0

url pkg:npm/express@3.8.0

purl pkg:npm/express@3.8.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-8jr1-tn77-dfds

vulnerability	VCID-axqm-hk9c-53gn

vulnerability	VCID-bcuh-2e2c-53gy

vulnerability	VCID-fevu-q6th-9beb

vulnerability	VCID-hyrv-e649-23fr

vulnerability	VCID-xnw8-djyq-1uhk

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/express@3.8.0

url pkg:npm/express@3.8.1

purl pkg:npm/express@3.8.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-8jr1-tn77-dfds

vulnerability	VCID-axqm-hk9c-53gn

vulnerability	VCID-bcuh-2e2c-53gy

vulnerability	VCID-fevu-q6th-9beb

vulnerability	VCID-hyrv-e649-23fr

vulnerability	VCID-xnw8-djyq-1uhk

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/express@3.8.1

url pkg:npm/express@3.9.0

purl pkg:npm/express@3.9.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-8jr1-tn77-dfds

vulnerability	VCID-axqm-hk9c-53gn

vulnerability	VCID-bcuh-2e2c-53gy

vulnerability	VCID-fevu-q6th-9beb

vulnerability	VCID-hyrv-e649-23fr

vulnerability	VCID-xnw8-djyq-1uhk

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/express@3.9.0

url pkg:npm/express@3.10.0

purl pkg:npm/express@3.10.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-8jr1-tn77-dfds

vulnerability	VCID-axqm-hk9c-53gn

vulnerability	VCID-bcuh-2e2c-53gy

vulnerability	VCID-fevu-q6th-9beb

vulnerability	VCID-hyrv-e649-23fr

vulnerability	VCID-xnw8-djyq-1uhk

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/express@3.10.0

url pkg:npm/express@3.10.1

purl pkg:npm/express@3.10.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-8jr1-tn77-dfds

vulnerability	VCID-axqm-hk9c-53gn

vulnerability	VCID-bcuh-2e2c-53gy

vulnerability	VCID-fevu-q6th-9beb

vulnerability	VCID-hyrv-e649-23fr

vulnerability	VCID-xnw8-djyq-1uhk

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/express@3.10.1

url pkg:npm/express@3.10.2

purl pkg:npm/express@3.10.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-8jr1-tn77-dfds

vulnerability	VCID-axqm-hk9c-53gn

vulnerability	VCID-bcuh-2e2c-53gy

vulnerability	VCID-fevu-q6th-9beb

vulnerability	VCID-hyrv-e649-23fr

vulnerability	VCID-xnw8-djyq-1uhk

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/express@3.10.2

url pkg:npm/express@3.10.3

purl pkg:npm/express@3.10.3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-8jr1-tn77-dfds

vulnerability	VCID-axqm-hk9c-53gn

vulnerability	VCID-bcuh-2e2c-53gy

vulnerability	VCID-fevu-q6th-9beb

vulnerability	VCID-hyrv-e649-23fr

vulnerability	VCID-xnw8-djyq-1uhk

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/express@3.10.3

url pkg:npm/express@3.10.4

purl pkg:npm/express@3.10.4

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-8jr1-tn77-dfds

vulnerability	VCID-axqm-hk9c-53gn

vulnerability	VCID-bcuh-2e2c-53gy

vulnerability	VCID-fevu-q6th-9beb

vulnerability	VCID-hyrv-e649-23fr

vulnerability	VCID-xnw8-djyq-1uhk

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/express@3.10.4

url pkg:npm/express@3.10.5

purl pkg:npm/express@3.10.5

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-8jr1-tn77-dfds

vulnerability	VCID-axqm-hk9c-53gn

vulnerability	VCID-bcuh-2e2c-53gy

vulnerability	VCID-fevu-q6th-9beb

vulnerability	VCID-hyrv-e649-23fr

vulnerability	VCID-xnw8-djyq-1uhk

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/express@3.10.5

url pkg:npm/express@3.11.0

purl pkg:npm/express@3.11.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-axqm-hk9c-53gn

vulnerability	VCID-bcuh-2e2c-53gy

vulnerability	VCID-fevu-q6th-9beb

vulnerability	VCID-hyrv-e649-23fr

vulnerability	VCID-xnw8-djyq-1uhk

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/express@3.11.0

url pkg:npm/express@3.12.0

purl pkg:npm/express@3.12.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-axqm-hk9c-53gn

vulnerability	VCID-bcuh-2e2c-53gy

vulnerability	VCID-fevu-q6th-9beb

vulnerability	VCID-hyrv-e649-23fr

vulnerability	VCID-xnw8-djyq-1uhk

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/express@3.12.0

url pkg:npm/express@3.12.1

purl pkg:npm/express@3.12.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-axqm-hk9c-53gn

vulnerability	VCID-bcuh-2e2c-53gy

vulnerability	VCID-fevu-q6th-9beb

vulnerability	VCID-hyrv-e649-23fr

vulnerability	VCID-xnw8-djyq-1uhk

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/express@3.12.1

url pkg:npm/express@3.13.0

purl pkg:npm/express@3.13.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-axqm-hk9c-53gn

vulnerability	VCID-bcuh-2e2c-53gy

vulnerability	VCID-fevu-q6th-9beb

vulnerability	VCID-hyrv-e649-23fr

vulnerability	VCID-xnw8-djyq-1uhk

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/express@3.13.0

url pkg:npm/express@3.14.0

purl pkg:npm/express@3.14.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-axqm-hk9c-53gn

vulnerability	VCID-bcuh-2e2c-53gy

vulnerability	VCID-fevu-q6th-9beb

vulnerability	VCID-hyrv-e649-23fr

vulnerability	VCID-xnw8-djyq-1uhk

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/express@3.14.0

url pkg:npm/express@3.15.0

purl pkg:npm/express@3.15.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-axqm-hk9c-53gn

vulnerability	VCID-bcuh-2e2c-53gy

vulnerability	VCID-fevu-q6th-9beb

vulnerability	VCID-hyrv-e649-23fr

vulnerability	VCID-xnw8-djyq-1uhk

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/express@3.15.0

url pkg:npm/express@3.15.1

purl pkg:npm/express@3.15.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-axqm-hk9c-53gn

vulnerability	VCID-bcuh-2e2c-53gy

vulnerability	VCID-fevu-q6th-9beb

vulnerability	VCID-hyrv-e649-23fr

vulnerability	VCID-xnw8-djyq-1uhk

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/express@3.15.1

url pkg:npm/express@3.15.2

purl pkg:npm/express@3.15.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-axqm-hk9c-53gn

vulnerability	VCID-bcuh-2e2c-53gy

vulnerability	VCID-fevu-q6th-9beb

vulnerability	VCID-hyrv-e649-23fr

vulnerability	VCID-xnw8-djyq-1uhk

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/express@3.15.2

url pkg:npm/express@3.15.3

purl pkg:npm/express@3.15.3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-axqm-hk9c-53gn

vulnerability	VCID-bcuh-2e2c-53gy

vulnerability	VCID-fevu-q6th-9beb

vulnerability	VCID-hyrv-e649-23fr

vulnerability	VCID-xnw8-djyq-1uhk

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/express@3.15.3

url pkg:npm/express@3.16.0

purl pkg:npm/express@3.16.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-axqm-hk9c-53gn

vulnerability	VCID-bcuh-2e2c-53gy

vulnerability	VCID-fevu-q6th-9beb

vulnerability	VCID-hyrv-e649-23fr

vulnerability	VCID-xnw8-djyq-1uhk

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/express@3.16.0

url pkg:npm/express@3.16.1

purl pkg:npm/express@3.16.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-axqm-hk9c-53gn

vulnerability	VCID-bcuh-2e2c-53gy

vulnerability	VCID-fevu-q6th-9beb

vulnerability	VCID-hyrv-e649-23fr

vulnerability	VCID-xnw8-djyq-1uhk

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/express@3.16.1

url pkg:npm/express@3.16.2

purl pkg:npm/express@3.16.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-axqm-hk9c-53gn

vulnerability	VCID-bcuh-2e2c-53gy

vulnerability	VCID-fevu-q6th-9beb

vulnerability	VCID-hyrv-e649-23fr

vulnerability	VCID-xnw8-djyq-1uhk

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/express@3.16.2

url pkg:npm/express@3.16.3

purl pkg:npm/express@3.16.3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-axqm-hk9c-53gn

vulnerability	VCID-bcuh-2e2c-53gy

vulnerability	VCID-fevu-q6th-9beb

vulnerability	VCID-hyrv-e649-23fr

vulnerability	VCID-xnw8-djyq-1uhk

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/express@3.16.3

url pkg:npm/express@3.16.4

purl pkg:npm/express@3.16.4

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-axqm-hk9c-53gn

vulnerability	VCID-bcuh-2e2c-53gy

vulnerability	VCID-fevu-q6th-9beb

vulnerability	VCID-hyrv-e649-23fr

vulnerability	VCID-xnw8-djyq-1uhk

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/express@3.16.4

url pkg:npm/express@3.16.5

purl pkg:npm/express@3.16.5

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-axqm-hk9c-53gn

vulnerability	VCID-bcuh-2e2c-53gy

vulnerability	VCID-fevu-q6th-9beb

vulnerability	VCID-hyrv-e649-23fr

vulnerability	VCID-xnw8-djyq-1uhk

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/express@3.16.5

url pkg:npm/express@3.16.6

purl pkg:npm/express@3.16.6

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-axqm-hk9c-53gn

vulnerability	VCID-bcuh-2e2c-53gy

vulnerability	VCID-fevu-q6th-9beb

vulnerability	VCID-hyrv-e649-23fr

vulnerability	VCID-xnw8-djyq-1uhk

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/express@3.16.6

url pkg:npm/express@3.16.7

purl pkg:npm/express@3.16.7

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-axqm-hk9c-53gn

vulnerability	VCID-bcuh-2e2c-53gy

vulnerability	VCID-fevu-q6th-9beb

vulnerability	VCID-hyrv-e649-23fr

vulnerability	VCID-xnw8-djyq-1uhk

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/express@3.16.7

url pkg:npm/express@3.16.8

purl pkg:npm/express@3.16.8

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-axqm-hk9c-53gn

vulnerability	VCID-bcuh-2e2c-53gy

vulnerability	VCID-fevu-q6th-9beb

vulnerability	VCID-hyrv-e649-23fr

vulnerability	VCID-xnw8-djyq-1uhk

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/express@3.16.8

url pkg:npm/express@3.16.9

purl pkg:npm/express@3.16.9

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-axqm-hk9c-53gn

vulnerability	VCID-bcuh-2e2c-53gy

vulnerability	VCID-fevu-q6th-9beb

vulnerability	VCID-hyrv-e649-23fr

vulnerability	VCID-xnw8-djyq-1uhk

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/express@3.16.9

url pkg:npm/express@3.16.10

purl pkg:npm/express@3.16.10

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-axqm-hk9c-53gn

vulnerability	VCID-bcuh-2e2c-53gy

vulnerability	VCID-fevu-q6th-9beb

vulnerability	VCID-hyrv-e649-23fr

vulnerability	VCID-xnw8-djyq-1uhk

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/express@3.16.10

url pkg:npm/express@3.17.0

purl pkg:npm/express@3.17.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-axqm-hk9c-53gn

vulnerability	VCID-bcuh-2e2c-53gy

vulnerability	VCID-fevu-q6th-9beb

vulnerability	VCID-hyrv-e649-23fr

vulnerability	VCID-xnw8-djyq-1uhk

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/express@3.17.0

url pkg:npm/express@3.17.1

purl pkg:npm/express@3.17.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-axqm-hk9c-53gn

vulnerability	VCID-bcuh-2e2c-53gy

vulnerability	VCID-fevu-q6th-9beb

vulnerability	VCID-hyrv-e649-23fr

vulnerability	VCID-xnw8-djyq-1uhk

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/express@3.17.1

url pkg:npm/express@3.17.2

purl pkg:npm/express@3.17.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-axqm-hk9c-53gn

vulnerability	VCID-bcuh-2e2c-53gy

vulnerability	VCID-fevu-q6th-9beb

vulnerability	VCID-hyrv-e649-23fr

vulnerability	VCID-xnw8-djyq-1uhk

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/express@3.17.2

url pkg:npm/express@3.17.3

purl pkg:npm/express@3.17.3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-axqm-hk9c-53gn

vulnerability	VCID-bcuh-2e2c-53gy

vulnerability	VCID-fevu-q6th-9beb

vulnerability	VCID-hyrv-e649-23fr

vulnerability	VCID-xnw8-djyq-1uhk

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/express@3.17.3

url pkg:npm/express@3.17.4

purl pkg:npm/express@3.17.4

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-axqm-hk9c-53gn

vulnerability	VCID-bcuh-2e2c-53gy

vulnerability	VCID-fevu-q6th-9beb

vulnerability	VCID-hyrv-e649-23fr

vulnerability	VCID-xnw8-djyq-1uhk

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/express@3.17.4

url pkg:npm/express@3.17.5

purl pkg:npm/express@3.17.5

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-axqm-hk9c-53gn

vulnerability	VCID-bcuh-2e2c-53gy

vulnerability	VCID-fevu-q6th-9beb

vulnerability	VCID-hyrv-e649-23fr

vulnerability	VCID-xnw8-djyq-1uhk

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/express@3.17.5

url pkg:npm/express@3.17.6

purl pkg:npm/express@3.17.6

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-axqm-hk9c-53gn

vulnerability	VCID-bcuh-2e2c-53gy

vulnerability	VCID-fevu-q6th-9beb

vulnerability	VCID-hyrv-e649-23fr

vulnerability	VCID-xnw8-djyq-1uhk

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/express@3.17.6

url pkg:npm/express@3.17.7

purl pkg:npm/express@3.17.7

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-axqm-hk9c-53gn

vulnerability	VCID-bcuh-2e2c-53gy

vulnerability	VCID-fevu-q6th-9beb

vulnerability	VCID-hyrv-e649-23fr

vulnerability	VCID-xnw8-djyq-1uhk

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/express@3.17.7

url pkg:npm/express@3.17.8

purl pkg:npm/express@3.17.8

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-axqm-hk9c-53gn

vulnerability	VCID-bcuh-2e2c-53gy

vulnerability	VCID-fevu-q6th-9beb

vulnerability	VCID-hyrv-e649-23fr

vulnerability	VCID-xnw8-djyq-1uhk

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/express@3.17.8

url pkg:npm/express@3.18.0

purl pkg:npm/express@3.18.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-axqm-hk9c-53gn

vulnerability	VCID-bcuh-2e2c-53gy

vulnerability	VCID-fevu-q6th-9beb

vulnerability	VCID-hyrv-e649-23fr

vulnerability	VCID-xnw8-djyq-1uhk

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/express@3.18.0

url pkg:npm/express@3.18.1

purl pkg:npm/express@3.18.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-axqm-hk9c-53gn

vulnerability	VCID-bcuh-2e2c-53gy

vulnerability	VCID-fevu-q6th-9beb

vulnerability	VCID-hyrv-e649-23fr

vulnerability	VCID-xnw8-djyq-1uhk

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/express@3.18.1

url pkg:npm/express@3.18.2

purl pkg:npm/express@3.18.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-axqm-hk9c-53gn

vulnerability	VCID-bcuh-2e2c-53gy

vulnerability	VCID-fevu-q6th-9beb

vulnerability	VCID-hyrv-e649-23fr

vulnerability	VCID-xnw8-djyq-1uhk

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/express@3.18.2

url pkg:npm/express@3.18.3

purl pkg:npm/express@3.18.3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-axqm-hk9c-53gn

vulnerability	VCID-bcuh-2e2c-53gy

vulnerability	VCID-fevu-q6th-9beb

vulnerability	VCID-hyrv-e649-23fr

vulnerability	VCID-xnw8-djyq-1uhk

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/express@3.18.3

url pkg:npm/express@3.18.4

purl pkg:npm/express@3.18.4

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-axqm-hk9c-53gn

vulnerability	VCID-bcuh-2e2c-53gy

vulnerability	VCID-fevu-q6th-9beb

vulnerability	VCID-hyrv-e649-23fr

vulnerability	VCID-xnw8-djyq-1uhk

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/express@3.18.4

url pkg:npm/express@3.18.5

purl pkg:npm/express@3.18.5

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-axqm-hk9c-53gn

vulnerability	VCID-bcuh-2e2c-53gy

vulnerability	VCID-fevu-q6th-9beb

vulnerability	VCID-hyrv-e649-23fr

vulnerability	VCID-xnw8-djyq-1uhk

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/express@3.18.5

url pkg:npm/express@3.18.6

purl pkg:npm/express@3.18.6

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-axqm-hk9c-53gn

vulnerability	VCID-bcuh-2e2c-53gy

vulnerability	VCID-fevu-q6th-9beb

vulnerability	VCID-hyrv-e649-23fr

vulnerability	VCID-xnw8-djyq-1uhk

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/express@3.18.6

url pkg:npm/express@3.19.0

purl pkg:npm/express@3.19.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-axqm-hk9c-53gn

vulnerability	VCID-bcuh-2e2c-53gy

vulnerability	VCID-fevu-q6th-9beb

vulnerability	VCID-hyrv-e649-23fr

vulnerability	VCID-xnw8-djyq-1uhk

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/express@3.19.0

url pkg:npm/express@3.19.1

purl pkg:npm/express@3.19.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-axqm-hk9c-53gn

vulnerability	VCID-bcuh-2e2c-53gy

vulnerability	VCID-fevu-q6th-9beb

vulnerability	VCID-hyrv-e649-23fr

vulnerability	VCID-xnw8-djyq-1uhk

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/express@3.19.1

url pkg:npm/express@3.19.2

purl pkg:npm/express@3.19.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-axqm-hk9c-53gn

vulnerability	VCID-bcuh-2e2c-53gy

vulnerability	VCID-fevu-q6th-9beb

vulnerability	VCID-hyrv-e649-23fr

vulnerability	VCID-xnw8-djyq-1uhk

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/express@3.19.2

url pkg:npm/express@3.20.0

purl pkg:npm/express@3.20.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-axqm-hk9c-53gn

vulnerability	VCID-bcuh-2e2c-53gy

vulnerability	VCID-fevu-q6th-9beb

vulnerability	VCID-hyrv-e649-23fr

vulnerability	VCID-xnw8-djyq-1uhk

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/express@3.20.0

url pkg:npm/express@3.20.1

purl pkg:npm/express@3.20.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-axqm-hk9c-53gn

vulnerability	VCID-bcuh-2e2c-53gy

vulnerability	VCID-fevu-q6th-9beb

vulnerability	VCID-hyrv-e649-23fr

vulnerability	VCID-xnw8-djyq-1uhk

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/express@3.20.1

url pkg:npm/express@3.20.2

purl pkg:npm/express@3.20.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-axqm-hk9c-53gn

vulnerability	VCID-bcuh-2e2c-53gy

vulnerability	VCID-fevu-q6th-9beb

vulnerability	VCID-hyrv-e649-23fr

vulnerability	VCID-xnw8-djyq-1uhk

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/express@3.20.2

url pkg:npm/express@3.20.3

purl pkg:npm/express@3.20.3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-axqm-hk9c-53gn

vulnerability	VCID-bcuh-2e2c-53gy

vulnerability	VCID-fevu-q6th-9beb

vulnerability	VCID-hyrv-e649-23fr

vulnerability	VCID-xnw8-djyq-1uhk

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/express@3.20.3

url pkg:npm/express@3.21.0

purl pkg:npm/express@3.21.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-axqm-hk9c-53gn

vulnerability	VCID-bcuh-2e2c-53gy

vulnerability	VCID-fevu-q6th-9beb

vulnerability	VCID-hyrv-e649-23fr

vulnerability	VCID-xnw8-djyq-1uhk

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/express@3.21.0

url pkg:npm/express@3.21.1

purl pkg:npm/express@3.21.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-axqm-hk9c-53gn

vulnerability	VCID-bcuh-2e2c-53gy

vulnerability	VCID-fevu-q6th-9beb

vulnerability	VCID-hyrv-e649-23fr

vulnerability	VCID-xnw8-djyq-1uhk

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/express@3.21.1

url pkg:npm/express@3.21.2

purl pkg:npm/express@3.21.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-axqm-hk9c-53gn

vulnerability	VCID-bcuh-2e2c-53gy

vulnerability	VCID-fevu-q6th-9beb

vulnerability	VCID-hyrv-e649-23fr

vulnerability	VCID-xnw8-djyq-1uhk

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/express@3.21.2

References

reference_url

https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-9266.json

reference_id

reference_type

scores

value	6.1
scoring_system	cvssv3
scoring_elements	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

url

https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-9266.json

reference_url

https://api.first.org/data/v1/epss?cve=CVE-2024-9266

reference_id

reference_type

scores

value	0.00125
scoring_system	epss
scoring_elements	0.31483
published_at	2026-04-24T12:55:00Z

value	0.00125
scoring_system	epss
scoring_elements	0.31659
published_at	2026-04-21T12:55:00Z

value	0.00125
scoring_system	epss
scoring_elements	0.31692
published_at	2026-04-18T12:55:00Z

value	0.00125
scoring_system	epss
scoring_elements	0.31714
published_at	2026-04-16T12:55:00Z

value	0.00125
scoring_system	epss
scoring_elements	0.31681
published_at	2026-04-13T12:55:00Z

value	0.00125
scoring_system	epss
scoring_elements	0.31809
published_at	2026-04-02T12:55:00Z

value	0.00125
scoring_system	epss
scoring_elements	0.31757
published_at	2026-04-11T12:55:00Z

value	0.00125
scoring_system	epss
scoring_elements	0.31754
published_at	2026-04-09T12:55:00Z

value	0.00125
scoring_system	epss
scoring_elements	0.31724
published_at	2026-04-08T12:55:00Z

value	0.00125
scoring_system	epss
scoring_elements	0.31673
published_at	2026-04-07T12:55:00Z

value	0.00125
scoring_system	epss
scoring_elements	0.31853
published_at	2026-04-04T12:55:00Z

value	0.00125
scoring_system	epss
scoring_elements	0.31717
published_at	2026-04-12T12:55:00Z

url

https://api.first.org/data/v1/epss?cve=CVE-2024-9266

reference_url

https://github.com/expressjs/express

reference_id

reference_type

scores

value	4.7
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N

value	2.1
scoring_system	cvssv4
scoring_elements	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:N/SA:N/E:P

value	LOW
scoring_system	generic_textual
scoring_elements

url

https://github.com/expressjs/express

reference_url

https://github.com/expressjs/express/compare/3.4.4...3.4.5

reference_id

reference_type

scores

value	4.7
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N

value	2.1
scoring_system	cvssv4
scoring_elements	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:N/SA:N/E:P

value	LOW
scoring_system	generic_textual
scoring_elements

url

https://github.com/expressjs/express/compare/3.4.4...3.4.5

reference_url

https://nvd.nist.gov/vuln/detail/CVE-2024-9266

reference_id

reference_type

scores

value	4.7
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N

value	2.1
scoring_system	cvssv4
scoring_elements	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:N/SA:N/E:P

value	LOW
scoring_system	generic_textual
scoring_elements

url

https://nvd.nist.gov/vuln/detail/CVE-2024-9266

reference_url

https://www.herodevs.com/vulnerability-directory/cve-2024-9266

reference_id

reference_type

scores

value	4.7
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N

value	2.1
scoring_system	cvssv4
scoring_elements	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:N/SA:N/E:P

value	LOW
scoring_system	generic_textual
scoring_elements

url

https://www.herodevs.com/vulnerability-directory/cve-2024-9266

reference_url	https://bugzilla.redhat.com/show_bug.cgi?id=2316353
reference_id	2316353
reference_type
scores
url	https://bugzilla.redhat.com/show_bug.cgi?id=2316353

reference_url

https://github.com/advisories/GHSA-jj78-5fmv-mv28

reference_id

GHSA-jj78-5fmv-mv28

reference_type

scores

value	LOW
scoring_system	cvssv3.1_qr
scoring_elements

url

https://github.com/advisories/GHSA-jj78-5fmv-mv28

Weaknesses

cwe_id	601
name	URL Redirection to Untrusted Site ('Open Redirect')
description	A web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a Redirect. This simplifies phishing attacks.

cwe_id	937
name	OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description	Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.

cwe_id	1035
name	OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description	Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.

Exploits

Severity_range_score 0.1 - 6.1

Exploitability 0.5

Weighted_severity 5.5

Risk_score 2.8

Resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-xnw8-djyq-1uhk

Vulnerability Instance