Update dependency express to v4.21.0 #11
Security Report
❌ New vulnerabilities:
| Vulnerability | Severity |  CVSS Score |
Exploit Maturity | EPSS | Vulnerable Library | Direct Library | Suggested Fix | Issue | Reachability |
|---|---|---|---|---|---|---|---|---|---|
CVE-2026-4867Path to dependency file: /package.json Path to vulnerable library: /package.json Dependency Hierarchy: -> express-4.21.0.tgz (Root Library) -> ❌ path-to-regexp-0.1.10.tgz (Vulnerable Library) |
 High |
7.5 | Not Defined | 0.1% | Transitive path-to-regexp-0.1.10.tgz |
express-4.21.0.tgz | Transitive path-to-regexp - 0.1.13 |
None |
|
CVE-2024-52798Path to dependency file: /package.json Path to vulnerable library: /package.json Dependency Hierarchy: -> express-4.21.0.tgz (Root Library) -> ❌ path-to-regexp-0.1.10.tgz (Vulnerable Library) |
High |
7.5 | Not Defined | 0.2% | Transitive path-to-regexp-0.1.10.tgz |
express-4.21.0.tgz | Transitive 0.1.12 |
None |
|
CVE-2024-47764Path to dependency file: /package.json Path to vulnerable library: /package.json Dependency Hierarchy: -> express-4.21.0.tgz (Root Library) -> ❌ cookie-0.6.0.tgz (Vulnerable Library) |
 Medium |
5.3 | Not Defined | 0.2% | Transitive cookie-0.6.0.tgz |
express-4.21.0.tgz | Transitive 0.7.0 |
None |
|
CVE-2026-2391Path to dependency file: /package.json Path to vulnerable library: /package.json Dependency Hierarchy: -> express-4.21.0.tgz (Root Library) -> ❌ qs-6.13.0.tgz (Vulnerable Library) |
 Low |
3.7 | Not Defined | 0.1% | Transitive qs-6.13.0.tgz |
express-4.21.0.tgz | Transitive 6.14.2 |
None |
|
CVE-2025-15284Path to dependency file: /package.json Path to vulnerable library: /package.json Dependency Hierarchy: -> express-4.21.0.tgz (Root Library) -> ❌ qs-6.13.0.tgz (Vulnerable Library) |
Low |
3.7 | Not Defined | 0.1% | Transitive qs-6.13.0.tgz |
express-4.21.0.tgz | Transitive 6.14.1 |
None |
|
✔️ Remediated vulnerabilities:
| Vulnerability | Vulnerable Library |
|---|---|
| CVE-2024-43799 | send-0.16.2.tgz |
| CVE-2024-45296 | path-to-regexp-0.1.7.tgz |
| CVE-2026-4867 | path-to-regexp-0.1.7.tgz |
| CVE-2024-43800 | serve-static-1.13.2.tgz |
| CVE-2024-29041 | express-4.16.4.tgz |
| CVE-2024-43796 | express-4.16.4.tgz |
| CVE-2024-52798 | path-to-regexp-0.1.7.tgz |
Base branch total remaining vulnerabilities: 77
Base branch commit: null
Total libraries scanned: 417
Scan token: 47ef0796a60044c8837d6251183c4eeb