Update dependency express to v4.22.0 #28
Security Report
❌ New vulnerabilities:
| Vulnerability | Severity |  CVSS Score |
Vulnerable Library | Direct Library | Suggested Fix | Issue | Reachability |
|---|---|---|---|---|---|---|---|
CVE-616547-419802Path to dependency file: /package.json Path to vulnerable library: /package.json Dependency Hierarchy: -> express-4.22.0.tgz (Root Library) -> ❌ parseurl-1.3.3.tgz (Vulnerable Library) |
 Critical |
9.8 | Transitive parseurl-1.3.3.tgz |
express-4.22.0.tgz | None | ||
CVE-398484-724968Path to dependency file: /package.json Path to vulnerable library: /package.json Dependency Hierarchy: -> express-4.22.0.tgz (Root Library) -> send-0.19.2.tgz -> ❌ ms-2.1.3.tgz (Vulnerable Library) |
Critical |
9.8 | Transitive ms-2.1.3.tgz |
express-4.22.0.tgz | None | ||
CVE-289561-266276Path to dependency file: /package.json Path to vulnerable library: /package.json Dependency Hierarchy: -> express-4.22.0.tgz (Root Library) -> send-0.19.2.tgz -> http-errors-2.0.1.tgz -> ❌ inherits-2.0.4.tgz (Vulnerable Library) |
Critical |
9.8 | Transitive inherits-2.0.4.tgz |
express-4.22.0.tgz | None |
✔️ Remediated vulnerabilities:
| Vulnerability | Vulnerable Library |
|---|---|
| GHSA-c3m8-x3cg-qm2c | helmet-csp-1.2.2.tgz |
| GHSA-mh5c-679w-hh4r | mongodb-2.2.36.tgz |
| GHSA-7fhm-mqm4-2wp7 | minimist-1.2.0.tgz |
| GHSA-7fhm-mqm4-2wp7 | minimist-0.0.10.tgz |
| CVE-2024-45296 | path-to-regexp-0.1.7.tgz |
| CVE-2026-4867 | path-to-regexp-0.1.7.tgz |
| CVE-2024-43800 | serve-static-1.13.2.tgz |
| CVE-2024-10491 | express-4.16.4.tgz |
| CVE-2024-43796 | express-4.16.4.tgz |
| GHSA-7fhm-mqm4-2wp7 | minimist-0.0.8.tgz |
| CVE-2024-52798 | path-to-regexp-0.1.7.tgz |
Base branch total remaining vulnerabilities: 75
Base branch commit: 38d9a31911b1bfc50b3204e1150ed6ed3d242abc
Total libraries scanned: 416
Scan token: f6d61bbe06054b93bc45ed41cf16df97