Package compatibility
Express 4.0
What Node.js versions does this Express version support?
Compatibility is derived from the declared Node.js version requirement (npm engines.node). CompatHub does not independently test every combination.
Declared Node.js requirement
- engines.node
- >= 0.8.0
- Tip version
- 4.1.0
- Source
- npm Registry (engines.node)
Node.js compatibility matrix
Evaluated against CompatHub Node.js VersionLines. Compatibility and lifecycle status are separate signals.
Other Express lines
Security
Advisories affecting Express 4.0 (OSV.dev evidence). Known exploited status, due dates, and ransomware use from CISA KEV when matched.
- Known vulnerabilities
- 2
- Known exploited
- 0
- Highest CVSS
- —
- CVE-2024-43796GHSA-qw6h-vgh9-j6wx
express vulnerable to XSS via response.redirect()
- Affected:
- <4.20.0
- Fixed in:
- 4.20.0
- Source:
- OSV source · Advisory
- CVE-2024-29041GHSA-rv95-896h-c2vc
Express.js Open Redirect in malformed URLs
- Affected:
- <4.19.2
- Fixed in:
- 4.19.2
- Source:
- OSV source · Advisory