Skip to content

Fix for GHSA-rv95-896h-c2vc#816

Closed
github-actions[bot] wants to merge 1 commit intomainfrom
socket/fix/GHSA-rv95-896h-c2vc
Closed

Fix for GHSA-rv95-896h-c2vc#816
github-actions[bot] wants to merge 1 commit intomainfrom
socket/fix/GHSA-rv95-896h-c2vc

Conversation

@github-actions
Copy link

Socket fix for GHSA-rv95-896h-c2vc.

Vulnerability Summary: Express.js Open Redirect in malformed URLs

Severity: MODERATE

Affected Packages: express (NPM) and express (NPM)

@github-actions github-actions bot enabled auto-merge (squash) October 25, 2025 00:18
@socket-security
Copy link

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Addednpm/​express@​4.19.2979310084100

View full report

@socket-security-staging
Copy link

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Addednpm/​express@​4.19.2979310084100

View full report

@jdalton jdalton closed this Oct 25, 2025
auto-merge was automatically disabled October 25, 2025 01:04

Pull request was closed

@jdalton jdalton deleted the socket/fix/GHSA-rv95-896h-c2vc branch October 30, 2025 05:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants