Express Openid Connect

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2022-24794 Mar 31, 23:15 npm MEDIUM PATCH This Month

Express OpenID Connect is an Express JS middleware implementing sign on for Express web apps using OpenID Connect. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Open Redirect vulnerability could allow attackers to redirect users to malicious websites via URL manipulation.

Google Open Redirect Auth0 Express Openid Connect

NVD GitHub

CVSS 3.1

6.1

EPSS

0.7%

CVE-2021-41246 Dec 09, 16:15 npm HIGH PATCH This Week

Express OpenID Connect is express JS middleware implementing sign on for Express web apps using OpenID Connect. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Information Disclosure Session Fixation Auth0 Express Openid Connect

NVD GitHub

CVSS 3.1

8.8

EPSS

0.9%

CVE-2022-24794 npm

EPSS 1% CVSS 6.1

MEDIUM PATCH This Month

Google Open Redirect Auth0 +1

NVD GitHub

CVE-2021-41246 npm

EPSS 1% CVSS 8.8

HIGH PATCH This Week

Information Disclosure Session Fixation Auth0 +1

NVD GitHub