.nav-burger { display: none !important; } @media (max-width: 1180px) { /* Match Tailwind's base layer: its important [hidden] reset otherwise wins. */ @layer base { .nav-overlay[hidden] { display: flex !important; } } .nav-overlay[hidden] { position: static; padding: 2rem 1rem; } }

express 4.0.0-rc1 vulnerabilities

5 advisories known · express@4.0.0-rc1 · 2 affect this release · Dependencies not checked

SEVERITYADVISORYPUBLISHED

Affects 4.0.0-rc1

SEVERITYADVISORYPUBLISHED

MediumExpress.js Open Redirect in malformed URLsGHSA-rv95-896h-c2vcCVE-2024-29041Affected <4.19.2, >=5.0.0-alpha.1 <5.0.0-beta.3Fixed in 4.19.2 Fixed in 5.0.0-beta.3OSV source ↗3 years ago

Mediumexpress vulnerable to XSS via response.redirect()GHSA-qw6h-vgh9-j6wxCVE-2024-43796Affected <4.20.0, >=5.0.0-alpha.1 <5.0.0Fixed in 4.20.0 Fixed in 5.0.0OSV source ↗2 years ago

Does not affect 4.0.0-rc1

SEVERITYADVISORYPUBLISHED

MediumNo Charset in Content-Type Header in expressGHSA-gpvr-g6gh-9mc2CVE-2014-6393Affected <3.11.0, >=4.0.0 <4.5.0Fixed in 3.11.0 Fixed in 4.5.0OSV source ↗8 years ago

MediumExpress Open Redirect vulnerabilityGHSA-jj78-5fmv-mv28CVE-2024-9266Affected >=3.4.5 <4.0.0-rc1Fixed in 4.0.0-rc1OSV source ↗2 years ago

MediumExpress ressource injectionGHSA-cm5g-3pgc-8rg4CVE-2024-10491Affected <4.0.0-rc1Fixed in 4.0.0-rc1OSV source ↗2 years ago