ExpressGateway express-gateway vulnerabilities
4 published CVEs name ExpressGateway express-gateway among the affected products.
- Published CVEs
- 4
- Last 12 months
- 2
- Critical
- 0
- Known exploited
- 0
Critical 0High 2Medium 2Low 0Not scored 0
CVEs per yearBy the year they were published
- 20252
- 20262
Newest CVEs
- CVE-2026-107177
Express Gateway through 1.16.11 Hardcoded Default cipherKey Exposes OAuth Tokens
ExpressGateway · express-gateway
High7.4 - CVE-2026-107162
Express Gateway through 1.16.11 OAuth 2.0 Refresh Token Validation Bypass
ExpressGateway · express-gateway
High7.6 - CVE-2025-9096
ExpressGateway express-gateway REST Endpoint apps.js cross site scripting
ExpressGateway · express-gateway
Medium5.1 - CVE-2025-9095
ExpressGateway express-gateway REST Endpoint users.js cross site scripting
ExpressGateway · express-gateway
Medium5.1