ExpressGateway vulnerabilities
4 published CVEs name ExpressGateway among the affected products.
- 4Published CVEs4 of them scored
- 2Last 12 monthspublished in the last year
- 0Critical2 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-107177
Express Gateway through 1.16.11 Hardcoded Default cipherKey Exposes OAuth Tokens
ExpressGateway · express-gateway
High7.4 - CVE-2026-107162
Express Gateway through 1.16.11 OAuth 2.0 Refresh Token Validation Bypass
ExpressGateway · express-gateway
High7.6 - CVE-2025-9096
ExpressGateway express-gateway REST Endpoint apps.js cross site scripting
ExpressGateway · express-gateway
Medium5.1 - CVE-2025-9095
ExpressGateway express-gateway REST Endpoint users.js cross site scripting
ExpressGateway · express-gateway
Medium5.1