Vulnerabilities

 25 via 43 paths

Dependencies

 301

Source

 GitHub

Commit

 1b66b1d7

Find, fix and prevent vulnerabilities in your code.

Test and protect my applications
mcibique/express-security
  • H
body-parser@1.19.0
  • H
qs@6.7.0
depd@1.1.2
http-errors@1.7.2
depd@1.1.2
statuses@1.5.0
toidentifier@1.0.0
setprototypeof@1.1.1
inherits@2.0.3
raw-body@2.4.0
http-errors@1.7.2
depd@1.1.2
statuses@1.5.0
toidentifier@1.0.0
setprototypeof@1.1.1
inherits@2.0.3
bytes@3.1.0
iconv-lite@0.4.24
safer-buffer@2.1.2
unpipe@1.0.0
bytes@3.1.0
debug@2.6.9
ms@2.0.0
type-is@1.6.18
mime-types@2.1.35
mime-db@1.52.0
media-typer@0.3.0
iconv-lite@0.4.24
safer-buffer@2.1.2
on-finished@2.3.0
ee-first@1.1.1
content-type@1.0.5
  • M
express@4.17.1
  • H
body-parser@1.19.0
  • H
qs@6.7.0
depd@1.1.2
http-errors@1.7.2
depd@1.1.2
statuses@1.5.0
toidentifier@1.0.0
setprototypeof@1.1.1
inherits@2.0.3
raw-body@2.4.0
http-errors@1.7.2
depd@1.1.2
statuses@1.5.0
toidentifier@1.0.0
setprototypeof@1.1.1
inherits@2.0.3
bytes@3.1.0
iconv-lite@0.4.24
safer-buffer@2.1.2
unpipe@1.0.0
bytes@3.1.0
debug@2.6.9
ms@2.0.0
type-is@1.6.18
mime-types@2.1.35
mime-db@1.52.0
media-typer@0.3.0
iconv-lite@0.4.24
safer-buffer@2.1.2
on-finished@2.3.0
ee-first@1.1.1
content-type@1.0.5
  • H
qs@6.7.0
  • L
send@0.17.1
http-errors@1.7.3
depd@1.1.2
inherits@2.0.4
statuses@1.5.0
toidentifier@1.0.0
setprototypeof@1.1.1
depd@1.1.2
debug@2.6.9
ms@2.0.0
on-finished@2.3.0
ee-first@1.1.1
etag@1.8.1
fresh@0.5.2
ms@2.1.1
mime@1.6.0
destroy@1.0.4
statuses@1.5.0
encodeurl@1.0.2
escape-html@1.0.3
range-parser@1.2.1
  • L
serve-static@1.14.1
  • L
send@0.17.1
http-errors@1.7.3
depd@1.1.2
inherits@2.0.4
statuses@1.5.0
toidentifier@1.0.0
setprototypeof@1.1.1
depd@1.1.2
debug@2.6.9
ms@2.0.0
on-finished@2.3.0
ee-first@1.1.1
etag@1.8.1
fresh@0.5.2
ms@2.1.1
mime@1.6.0
destroy@1.0.4
statuses@1.5.0
encodeurl@1.0.2
escape-html@1.0.3
range-parser@1.2.1
parseurl@1.3.3
encodeurl@1.0.2
escape-html@1.0.3
depd@1.1.2
debug@2.6.9
ms@2.0.0
finalhandler@1.1.2
debug@2.6.9
ms@2.0.0
on-finished@2.3.0
ee-first@1.1.1
parseurl@1.3.3
statuses@1.5.0
encodeurl@1.0.2
escape-html@1.0.3
unpipe@1.0.0
vary@1.1.2
safe-buffer@5.1.2
content-disposition@0.5.3
safe-buffer@5.1.2
cookie-signature@1.0.6
on-finished@2.3.0
ee-first@1.1.1
content-type@1.0.5
type-is@1.6.18
mime-types@2.1.35
mime-db@1.52.0
media-typer@0.3.0
accepts@1.3.8
mime-types@2.1.35
mime-db@1.52.0
negotiator@0.6.3
setprototypeof@1.1.1
etag@1.8.1
fresh@0.5.2
  • M
cookie@0.4.0
methods@1.1.2
parseurl@1.3.3
statuses@1.5.0
encodeurl@1.0.2
escape-html@1.0.3
proxy-addr@2.0.7
forwarded@0.2.0
ipaddr.js@1.9.1
utils-merge@1.0.1
range-parser@1.2.1
array-flatten@1.1.1
  • M
path-to-regexp@0.1.7
merge-descriptors@1.0.1
cache-manager@2.9.1
async@1.5.2
lru-cache@4.0.0
yallist@2.1.2
pseudomap@1.0.2
compression@1.7.4
debug@2.6.9
ms@2.0.0
vary@1.1.2
bytes@3.0.0
accepts@1.3.8
mime-types@2.1.35
mime-db@1.52.0
negotiator@0.6.3
  • M
on-headers@1.0.2
safe-buffer@5.1.2
compressible@2.0.18
mime-db@1.54.0
connect-redis@3.4.1
debug@4.4.1
ms@2.1.3
  • M
redis@2.8.0
redis-parser@2.6.0
redis-commands@1.7.0
double-ended-queue@2.1.0-0
cookie-parser@1.4.4
  • M
cookie@0.3.1
cookie-signature@1.0.6
csurf@1.10.0
http-errors@1.7.3
depd@1.1.2
inherits@2.0.4
statuses@1.5.0
toidentifier@1.0.0
setprototypeof@1.1.1
  • M
cookie@0.3.1
cookie-signature@1.0.6
csrf@3.1.0
rndm@1.2.0
tsscmp@1.0.6
uid-safe@2.1.5
random-bytes@1.0.0
http-errors@1.7.2
depd@1.1.2
statuses@1.5.0
toidentifier@1.0.0
setprototypeof@1.1.1
inherits@2.0.3
morgan@1.9.1
depd@1.1.2
debug@2.6.9
ms@2.0.0
basic-auth@2.0.1
safe-buffer@5.1.2
on-finished@2.3.0
ee-first@1.1.1
  • M
on-headers@1.0.2
express-session@1.16.2
debug@2.6.9
ms@2.0.0
  • M
on-headers@1.0.2
safe-buffer@5.1.2
  • M
cookie@0.3.1
cookie-signature@1.0.6
uid-safe@2.1.5
random-bytes@1.0.0
depd@2.0.0
parseurl@1.3.3
cache-manager-redis@0.6.0
cache-manager@2.11.1
async@1.5.2
lru-cache@4.0.0
yallist@2.1.2
pseudomap@1.0.2
lodash.clonedeep@4.5.0
redis-url@1.2.1
redis@5.8.2
@redis/bloom@5.8.2
@redis/json@5.8.2
@redis/time-series@5.8.2
@redis/client@5.8.2
cluster-key-slot@1.1.2
@redis/search@5.8.2
sol-redis-pool@0.3.3
redis@5.8.2
@redis/bloom@5.8.2
@redis/json@5.8.2
@redis/time-series@5.8.2
@redis/client@5.8.2
cluster-key-slot@1.1.2
@redis/search@5.8.2
bluebird@3.7.2
generic-pool@2.2.1
  • M
socket.io@2.2.0
  • H
engine.io@3.3.2
  • M
cookie@0.3.1
debug@3.1.0
ms@2.0.0
accepts@1.3.8
mime-types@2.1.35
mime-db@1.52.0
negotiator@0.6.3
engine.io-parser@2.1.3
has-binary2@1.0.3
isarray@2.0.1
blob@0.0.5
after@0.8.2
arraybuffer.slice@0.0.7
base64-arraybuffer@0.1.5
  • H
  • M
ws@6.1.4
async-limiter@1.0.1
base64id@1.0.0
socket.io-client@2.2.0
debug@3.1.0
ms@2.0.0
socket.io-parser@3.3.4
debug@3.1.0
ms@2.0.0
isarray@2.0.1
component-emitter@1.3.1
engine.io-client@3.3.3
debug@3.1.0
ms@2.0.0
engine.io-parser@2.1.3
has-binary2@1.0.3
isarray@2.0.1
blob@0.0.5
after@0.8.2
arraybuffer.slice@0.0.7
base64-arraybuffer@0.1.5
  • H
  • M
ws@6.1.4
async-limiter@1.0.1
indexof@0.0.1
parseqs@0.0.5
better-assert@1.0.2
callsite@1.0.0
has-cors@1.1.0
parseuri@0.0.5
better-assert@1.0.2
callsite@1.0.0
component-emitter@1.2.1
yeast@0.1.2
component-inherit@0.0.3
xmlhttprequest-ssl@1.6.3
has-binary2@1.0.3
isarray@2.0.1
backo2@1.0.2
indexof@0.0.1
parseqs@0.0.5
better-assert@1.0.2
callsite@1.0.0
has-cors@1.1.0
parseuri@0.0.5
better-assert@1.0.2
callsite@1.0.0
to-array@0.1.4
base64-arraybuffer@0.1.5
component-bind@1.0.0
object-component@0.0.3
component-emitter@1.2.1
socket.io-parser@3.3.4
debug@3.1.0
ms@2.0.0
isarray@2.0.1
component-emitter@1.3.1
  • L
debug@4.1.1
ms@2.1.3
has-binary2@1.0.3
isarray@2.0.1
socket.io-adapter@1.1.2
express-socket.io-session@1.3.5
cookie-parser@1.3.5
cookie-signature@1.0.6
  • M
cookie@0.1.3
debug@2.6.9
ms@2.0.0
crc@3.8.0
buffer@5.7.1
base64-js@1.5.1
ieee754@1.2.1
socket.io-client@2.2.0
debug@3.1.0
ms@2.0.0
socket.io-parser@3.3.4
debug@3.1.0
ms@2.0.0
isarray@2.0.1
component-emitter@1.3.1
engine.io-client@3.3.3
debug@3.1.0
ms@2.0.0
engine.io-parser@2.1.3
has-binary2@1.0.3
isarray@2.0.1
blob@0.0.5
after@0.8.2
arraybuffer.slice@0.0.7
base64-arraybuffer@0.1.5
  • H
  • M
ws@6.1.4
async-limiter@1.0.1
indexof@0.0.1
parseqs@0.0.5
better-assert@1.0.2
callsite@1.0.0
has-cors@1.1.0
parseuri@0.0.5
better-assert@1.0.2
callsite@1.0.0
component-emitter@1.2.1
yeast@0.1.2
component-inherit@0.0.3
xmlhttprequest-ssl@1.6.3
has-binary2@1.0.3
isarray@2.0.1
backo2@1.0.2
indexof@0.0.1
parseqs@0.0.5
better-assert@1.0.2
callsite@1.0.0
has-cors@1.1.0
parseuri@0.0.5
better-assert@1.0.2
callsite@1.0.0
to-array@0.1.4
base64-arraybuffer@0.1.5
component-bind@1.0.0
object-component@0.0.3
component-emitter@1.2.1
socket.io-redis@5.2.0
debug@2.6.9
ms@2.0.0
  • M
redis@2.8.0
redis-parser@2.6.0
redis-commands@1.7.0
double-ended-queue@2.1.0-0
socket.io-adapter@1.1.2
uid2@0.0.3
notepack.io@2.1.3
spdy@4.0.0
debug@4.4.1
ms@2.1.3
spdy-transport@3.0.0
debug@4.4.1
ms@2.1.3
detect-node@2.1.0
hpack.js@2.1.6
inherits@2.0.4
obuf@1.1.2
readable-stream@2.3.8
isarray@1.0.0
inherits@2.0.4
safe-buffer@5.1.2
core-util-is@1.0.3
string_decoder@1.1.1
safe-buffer@5.1.2
util-deprecate@1.0.2
process-nextick-args@2.0.1
wbuf@1.7.3
minimalistic-assert@1.0.1
obuf@1.1.2
readable-stream@3.6.2
inherits@2.0.4
string_decoder@1.3.0
safe-buffer@5.2.1
util-deprecate@1.0.2
wbuf@1.7.3
minimalistic-assert@1.0.1
handle-thing@2.0.1
http-deceiver@1.2.7
select-hose@2.0.0
rate-limit-redis@1.6.0
  • M
redis@2.8.0
redis-parser@2.6.0
redis-commands@1.7.0
double-ended-queue@2.1.0-0
defaults@1.0.4
clone@1.0.4
  • L
debug@4.1.1
ms@2.1.3
express-rate-limit@5.0.0
winston@3.2.1
logform@2.7.0
ms@2.1.3
triple-beam@1.4.1
@colors/colors@1.6.0
@types/triple-beam@1.3.5
fecha@4.2.3
safe-stable-stringify@2.5.0
winston-transport@4.9.0
logform@2.7.0
ms@2.1.3
triple-beam@1.4.1
@colors/colors@1.6.0
@types/triple-beam@1.3.5
fecha@4.2.3
safe-stable-stringify@2.5.0
readable-stream@3.6.2
inherits@2.0.4
string_decoder@1.3.0
safe-buffer@5.2.1
util-deprecate@1.0.2
triple-beam@1.4.1
readable-stream@3.6.2
inherits@2.0.4
string_decoder@1.3.0
safe-buffer@5.2.1
util-deprecate@1.0.2
async@2.6.4
lodash@4.17.21
one-time@0.0.4
is-stream@1.1.0
diagnostics@1.1.1
colorspace@1.1.4
color@3.2.1
color-string@1.9.1
color-name@1.1.4
simple-swizzle@0.2.2
is-arrayish@0.3.2
color-convert@1.9.3
color-name@1.1.3
text-hex@1.0.0
enabled@1.0.2
env-variable@0.0.6
kuler@1.0.1
colornames@1.1.1
stack-trace@0.0.10
triple-beam@1.4.1
serve-favicon@2.5.0
etag@1.8.1
fresh@0.5.2
ms@2.1.1
parseurl@1.3.3
safe-buffer@5.1.1
extend@3.0.2
find@0.3.0
traverse-chain@0.1.0
helmet@3.18.0
depd@2.0.0
hsts@2.2.0
depd@2.0.0
hpkp@2.0.0
nocache@2.1.0
ienoopen@1.1.0
frameguard@3.1.0
  • M
helmet-csp@2.7.1
camelize@1.0.0
platform@1.3.5
dasherize@2.0.0
content-security-policy-builder@2.0.0
feature-policy@0.3.0
hide-powered-by@1.0.0
referrer-policy@1.2.0
x-xss-protection@1.1.0
helmet-crossdomain@0.3.0
dont-sniff-mimetype@1.0.0
dns-prefetch-control@0.1.0
expect-ct@0.2.0
  • M
jquery@3.4.1
mime-types@2.1.24
mime-db@1.40.0
  • H
moment@2.24.0
ms@2.1.2
node-uuid@1.4.8
  • H
pug@2.0.3
pug-load@2.0.12
object-assign@4.1.1
pug-walk@1.1.8
pug-lexer@4.1.0
character-parser@2.2.0
is-regex@1.2.1
call-bound@1.0.4
get-intrinsic@1.3.0
gopd@1.2.0
get-proto@1.0.1
dunder-proto@1.0.1
gopd@1.2.0
call-bind-apply-helpers@1.0.2
function-bind@1.1.2
es-errors@1.3.0
es-errors@1.3.0
es-object-atoms@1.1.1
es-errors@1.3.0
hasown@2.0.2
function-bind@1.1.2
call-bind-apply-helpers@1.0.2
function-bind@1.1.2
es-errors@1.3.0
function-bind@1.1.2
es-errors@1.3.0
es-object-atoms@1.1.1
es-errors@1.3.0
es-define-property@1.0.1
has-symbols@1.1.0
math-intrinsics@1.1.0
call-bind-apply-helpers@1.0.2
function-bind@1.1.2
es-errors@1.3.0
gopd@1.2.0
has-tostringtag@1.0.2
has-symbols@1.1.0
hasown@2.0.2
function-bind@1.1.2
is-expression@3.0.0
acorn@4.0.13
object-assign@4.1.1
pug-error@1.3.3
pug-linker@3.0.6
pug-walk@1.1.8
pug-error@1.3.3
pug-parser@5.0.1
pug-error@1.3.3
token-stream@0.0.1
pug-filters@3.1.1
pug-walk@1.1.8
pug-error@1.3.3
clean-css@4.2.4
source-map@0.6.1
constantinople@3.1.2
@types/babel-types@7.0.16
@types/babylon@6.16.9
@types/babel-types@7.0.16
babel-types@6.26.0
babel-runtime@6.26.0
core-js@2.6.12
regenerator-runtime@0.11.1
esutils@2.0.3
lodash@4.17.21
to-fast-properties@1.0.3
babylon@6.18.0
jstransformer@1.0.0
is-promise@2.2.2
promise@7.3.1
asap@2.0.6
resolve@1.22.10
is-core-module@2.16.1
hasown@2.0.2
function-bind@1.1.2
path-parse@1.0.7
supports-preserve-symlinks-flag@1.0.0
  • M
uglify-js@2.8.29
yargs@3.10.0
cliui@2.1.0
wordwrap@0.0.2
right-align@0.1.3
align-text@0.1.4
kind-of@3.2.2
is-buffer@1.1.6
longest@1.0.1
repeat-string@1.6.1
center-align@0.1.3
align-text@0.1.4
kind-of@3.2.2
is-buffer@1.1.6
longest@1.0.1
repeat-string@1.6.1
lazy-cache@1.0.4
camelcase@1.2.1
decamelize@1.2.0
window-size@0.1.0
source-map@0.5.7
uglify-to-browserify@1.0.2
pug-runtime@2.0.5
  • H
pug-code-gen@2.0.3
pug-error@1.3.3
pug-attrs@2.0.4
constantinople@3.1.2
@types/babel-types@7.0.16
@types/babylon@6.16.9
@types/babel-types@7.0.16
babel-types@6.26.0
babel-runtime@6.26.0
core-js@2.6.12
regenerator-runtime@0.11.1
esutils@2.0.3
lodash@4.17.21
to-fast-properties@1.0.3
babylon@6.18.0
js-stringify@1.0.2
pug-runtime@2.0.5
constantinople@3.1.2
@types/babel-types@7.0.16
@types/babylon@6.16.9
@types/babel-types@7.0.16
babel-types@6.26.0
babel-runtime@6.26.0
core-js@2.6.12
regenerator-runtime@0.11.1
esutils@2.0.3
lodash@4.17.21
to-fast-properties@1.0.3
babylon@6.18.0
doctypes@1.1.0
js-stringify@1.0.2
pug-runtime@2.0.5
void-elements@2.0.1
with@5.1.1
acorn@3.3.0
acorn-globals@3.1.0
acorn@4.0.13
pug-strip-comments@1.0.4
pug-error@1.3.3
normalize-scss@7.0.1
static-asset@0.6.0
crc@2.1.1
url@0.11.0
punycode@1.3.2
querystring@0.2.0
url-join@4.0.0
winston-transport@4.3.0
triple-beam@1.4.1
readable-stream@2.3.8
isarray@1.0.0
inherits@2.0.4
safe-buffer@5.1.2
core-util-is@1.0.3
string_decoder@1.1.1
safe-buffer@5.1.2
util-deprecate@1.0.2
process-nextick-args@2.0.1