{"schemaVersion":3,"id":"CVE-2024-43796","aliases":["UBUNTU-CVE-2024-43796","DEBIAN-CVE-2024-43796","CGA-28vm-9whp-qgfr","CGA-2w88-hqw8-69m3","CGA-3jf7-prjm-gggp","CGA-3w8v-5792-c3h6","CGA-4fwm-76g5-fcpc","CGA-5gqc-hgff-j7j3","CGA-68rv-g3jv-c2xh","CGA-74p4-xmrx-c9gx","CGA-7r6g-pf34-mx8f","CGA-838x-6mc4-cp2r","CGA-8fwq-hwcv-m377","CGA-92vj-9hqr-5378","CGA-fgm9-5j6c-xp7r","CGA-g6m4-g2rp-gv6f","CGA-g89h-cvmr-hf4g","CGA-ggxq-g7j5-qqrx","CGA-hr5r-mp4r-3m3f","CGA-j7g3-2qj8-g362","CGA-j9w3-qf3q-cp4x","CGA-m3v2-38w2-4wh5","CGA-mh9v-qrx4-2wv5","CGA-mm57-634p-5f9q","CGA-pmj5-mjc9-rvjj","CGA-qc93-w4f5-5gw9","CGA-qqj8-gr4g-f77w","CGA-r958-frj2-xxrh","CGA-r979-53qp-fjcf","CGA-v27v-9qq8-mx8g","CGA-vh9j-xxrp-frgx","CGA-w4pm-fc29-fr2w","CGA-x7mg-rgg5-cfx5","CGA-xj3w-c57x-xf2v","GHSA-qw6h-vgh9-j6wx","CGA-c8xh-9j62-mcjf","CGA-m7f8-r3v7-xjfh"],"status":"published","duplicateOf":null,"title":null,"description":"Express.js minimalist web framework for node. In express < 4.20.0, passing untrusted user input - even after sanitizing it - to response.redirect() may execute untrusted code. This issue is patched in express 4.20.0.","dates":{"published":"2024-09-10T14:36:27.380Z","modified":"2024-09-10T15:58:45.956Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":5,"severity":"medium","version":"3.1","versionLabel":"v3.1","source":"CVE.org","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":5,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Ubuntu","score":4.7,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N","exploitability":4.1,"impact":4.5,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Debian","score":4.7,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N","exploitability":4.1,"impact":4.5,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Wolfi","score":5,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","exploitability":4.1,"impact":5.7,"computed":true},{"version":"4.0","versionLabel":"v4.0","source":"OSV · Npm","score":2.3,"severity":"low","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:L","exploitability":null,"impact":null,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Npm","score":5,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","exploitability":4.1,"impact":5.7,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Chainguard","score":5,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","exploitability":4.1,"impact":5.7,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":4.7,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00486,"percentile":0.406,"severity":"low","asOf":"2026-10-20T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-20T00:00:00.000Z","baselineScore":0.00486},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.00486,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.00486,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.00486,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.00486,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.00486,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00486,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00486,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00486,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00486,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00486,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00486,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00486,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00486,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00486,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00486,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00486,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00486,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00486,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00486,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00486,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00486,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00486,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00486,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00486,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00486,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00486,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00486,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00486,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00486,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00486,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00486,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00486,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00486,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00486,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00486,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00486,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00486,"percentile":0.406}],"last30":[{"date":"2026-09-20T00:00:00.000Z","score":0.00486,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00486,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00486,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00486,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00486,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00486,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00486,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00486,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00486,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00486,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00486,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00486,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00486,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00486,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00486,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00486,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00486,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00486,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00486,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00486,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00486,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00486,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00486,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00486,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00486,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00486,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00486,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00486,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00486,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00486,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00486,"percentile":0.406}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-79","name":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')","description":"The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.","type":"weakness","status":"Stable","abstraction":"Base","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/79.html"}],"affected":[{"vendor":"chainguard","product":"arangodb-3.11","name":"arangodb-3.11","label":"arangodb-3.11","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/arangodb-3.11","purlType":"apk","versions":[{"text":"< 3.11.14.5-r25","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.11.14.5-r25","eol":null,"hubHref":null},{"vendor":"chainguard","product":"argo-workflows","name":"argo-workflows","label":"argo-workflows","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/argo-workflows","purlType":"apk","versions":[{"text":"< 3.6.5-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.6.5-r2","eol":{"isEol":null,"eolDate":null,"matchMethod":"name_exact","cycle":null,"product":{"name":"argo-workflows","label":"Argo Workflows","category":"server-app"}},"hubHref":null},{"vendor":"chainguard","product":"kubeflow-centraldashboard","name":"kubeflow-centraldashboard","label":"kubeflow-centraldashboard","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kubeflow-centraldashboard","purlType":"apk","versions":[{"text":"< 1.9.0-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.9.0-r4","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kubeflow-pipelines","name":"kubeflow-pipelines","label":"kubeflow-pipelines","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kubeflow-pipelines","purlType":"apk","versions":[{"text":"< 2.2.0-r12","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.2.0-r12","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kubeflow-pipelines-apiserver","name":"kubeflow-pipelines-apiserver","label":"kubeflow-pipelines-apiserver","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kubeflow-pipelines-apiserver","purlType":"apk","versions":[{"text":"< 2.2.0-r12","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.2.0-r12","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kubeflow-pipelines-cache_server","name":"kubeflow-pipelines-cache_server","label":"kubeflow-pipelines-cache_server","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kubeflow-pipelines-cache_server","purlType":"apk","versions":[{"text":"< 2.2.0-r12","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.2.0-r12","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kubeflow-pipelines-cache-deployer","name":"kubeflow-pipelines-cache-deployer","label":"kubeflow-pipelines-cache-deployer","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kubeflow-pipelines-cache-deployer","purlType":"apk","versions":[{"text":"< 2.2.0-r12","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.2.0-r12","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kubeflow-pipelines-cache-deployer-compat","name":"kubeflow-pipelines-cache-deployer-compat","label":"kubeflow-pipelines-cache-deployer-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kubeflow-pipelines-cache-deployer-compat","purlType":"apk","versions":[{"text":"< 2.2.0-r12","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.2.0-r12","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kubeflow-pipelines-frontend","name":"kubeflow-pipelines-frontend","label":"kubeflow-pipelines-frontend","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kubeflow-pipelines-frontend","purlType":"apk","versions":[{"text":"< 2.2.0-r12","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.2.0-r12","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kubeflow-pipelines-metadata-envoy-config","name":"kubeflow-pipelines-metadata-envoy-config","label":"kubeflow-pipelines-metadata-envoy-config","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kubeflow-pipelines-metadata-envoy-config","purlType":"apk","versions":[{"text":"< 2.2.0-r12","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.2.0-r12","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kubeflow-pipelines-metadata-writer","name":"kubeflow-pipelines-metadata-writer","label":"kubeflow-pipelines-metadata-writer","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kubeflow-pipelines-metadata-writer","purlType":"apk","versions":[{"text":"< 2.2.0-r12","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.2.0-r12","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kubeflow-pipelines-metadata-writer-compat","name":"kubeflow-pipelines-metadata-writer-compat","label":"kubeflow-pipelines-metadata-writer-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kubeflow-pipelines-metadata-writer-compat","purlType":"apk","versions":[{"text":"< 2.2.0-r12","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.2.0-r12","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kubeflow-pipelines-persistence_agent","name":"kubeflow-pipelines-persistence_agent","label":"kubeflow-pipelines-persistence_agent","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kubeflow-pipelines-persistence_agent","purlType":"apk","versions":[{"text":"< 2.2.0-r12","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.2.0-r12","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kubeflow-pipelines-scheduledworkflow","name":"kubeflow-pipelines-scheduledworkflow","label":"kubeflow-pipelines-scheduledworkflow","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kubeflow-pipelines-scheduledworkflow","purlType":"apk","versions":[{"text":"< 2.2.0-r12","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.2.0-r12","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kubeflow-pipelines-viewer-crd-controller","name":"kubeflow-pipelines-viewer-crd-controller","label":"kubeflow-pipelines-viewer-crd-controller","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kubeflow-pipelines-viewer-crd-controller","purlType":"apk","versions":[{"text":"< 2.2.0-r12","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.2.0-r12","eol":null,"hubHref":null},{"vendor":"chainguard","product":"sqlpad","name":"sqlpad","label":"sqlpad","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/sqlpad","purlType":"apk","versions":[{"text":"< 7.5.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.5.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"sqlpad-compat","name":"sqlpad-compat","label":"sqlpad-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/sqlpad-compat","purlType":"apk","versions":[{"text":"< 7.5.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.5.0-r1","eol":null,"hubHref":null},{"vendor":"wolfi","product":"argo-workflows","name":"argo-workflows","label":"argo-workflows","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/argo-workflows","purlType":"apk","versions":[{"text":"< 3.6.5-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.6.5-r2","eol":{"isEol":null,"eolDate":null,"matchMethod":"name_exact","cycle":null,"product":{"name":"argo-workflows","label":"Argo Workflows","category":"server-app"}},"hubHref":null},{"vendor":"wolfi","product":"kubeflow-centraldashboard","name":"kubeflow-centraldashboard","label":"kubeflow-centraldashboard","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/kubeflow-centraldashboard","purlType":"apk","versions":[{"text":"< 1.9.0-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.9.0-r4","eol":null,"hubHref":null},{"vendor":"wolfi","product":"kubeflow-pipelines","name":"kubeflow-pipelines","label":"kubeflow-pipelines","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/kubeflow-pipelines","purlType":"apk","versions":[{"text":"< 2.2.0-r12","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.2.0-r12","eol":null,"hubHref":null},{"vendor":"wolfi","product":"kubeflow-pipelines-apiserver","name":"kubeflow-pipelines-apiserver","label":"kubeflow-pipelines-apiserver","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/kubeflow-pipelines-apiserver","purlType":"apk","versions":[{"text":"< 2.2.0-r12","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.2.0-r12","eol":null,"hubHref":null},{"vendor":"wolfi","product":"kubeflow-pipelines-cache_server","name":"kubeflow-pipelines-cache_server","label":"kubeflow-pipelines-cache_server","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/kubeflow-pipelines-cache_server","purlType":"apk","versions":[{"text":"< 2.2.0-r12","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.2.0-r12","eol":null,"hubHref":null},{"vendor":"wolfi","product":"kubeflow-pipelines-cache-deployer","name":"kubeflow-pipelines-cache-deployer","label":"kubeflow-pipelines-cache-deployer","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/kubeflow-pipelines-cache-deployer","purlType":"apk","versions":[{"text":"< 2.2.0-r12","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.2.0-r12","eol":null,"hubHref":null},{"vendor":"wolfi","product":"kubeflow-pipelines-cache-deployer-compat","name":"kubeflow-pipelines-cache-deployer-compat","label":"kubeflow-pipelines-cache-deployer-compat","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/kubeflow-pipelines-cache-deployer-compat","purlType":"apk","versions":[{"text":"< 2.2.0-r12","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.2.0-r12","eol":null,"hubHref":null},{"vendor":"wolfi","product":"kubeflow-pipelines-frontend","name":"kubeflow-pipelines-frontend","label":"kubeflow-pipelines-frontend","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/kubeflow-pipelines-frontend","purlType":"apk","versions":[{"text":"< 2.2.0-r12","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.2.0-r12","eol":null,"hubHref":null},{"vendor":"wolfi","product":"kubeflow-pipelines-metadata-envoy-config","name":"kubeflow-pipelines-metadata-envoy-config","label":"kubeflow-pipelines-metadata-envoy-config","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/kubeflow-pipelines-metadata-envoy-config","purlType":"apk","versions":[{"text":"< 2.2.0-r12","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.2.0-r12","eol":null,"hubHref":null},{"vendor":"wolfi","product":"kubeflow-pipelines-metadata-writer","name":"kubeflow-pipelines-metadata-writer","label":"kubeflow-pipelines-metadata-writer","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/kubeflow-pipelines-metadata-writer","purlType":"apk","versions":[{"text":"< 2.2.0-r12","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.2.0-r12","eol":null,"hubHref":null},{"vendor":"wolfi","product":"kubeflow-pipelines-metadata-writer-compat","name":"kubeflow-pipelines-metadata-writer-compat","label":"kubeflow-pipelines-metadata-writer-compat","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/kubeflow-pipelines-metadata-writer-compat","purlType":"apk","versions":[{"text":"< 2.2.0-r12","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.2.0-r12","eol":null,"hubHref":null},{"vendor":"wolfi","product":"kubeflow-pipelines-persistence_agent","name":"kubeflow-pipelines-persistence_agent","label":"kubeflow-pipelines-persistence_agent","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/kubeflow-pipelines-persistence_agent","purlType":"apk","versions":[{"text":"< 2.2.0-r12","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.2.0-r12","eol":null,"hubHref":null},{"vendor":"wolfi","product":"kubeflow-pipelines-scheduledworkflow","name":"kubeflow-pipelines-scheduledworkflow","label":"kubeflow-pipelines-scheduledworkflow","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/kubeflow-pipelines-scheduledworkflow","purlType":"apk","versions":[{"text":"< 2.2.0-r12","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.2.0-r12","eol":null,"hubHref":null},{"vendor":"wolfi","product":"kubeflow-pipelines-viewer-crd-controller","name":"kubeflow-pipelines-viewer-crd-controller","label":"kubeflow-pipelines-viewer-crd-controller","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/kubeflow-pipelines-viewer-crd-controller","purlType":"apk","versions":[{"text":"< 2.2.0-r12","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.2.0-r12","eol":null,"hubHref":null},{"vendor":"wolfi","product":"sqlpad","name":"sqlpad","label":"sqlpad","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/sqlpad","purlType":"apk","versions":[{"text":"< 7.5.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.5.0-r1","eol":null,"hubHref":null},{"vendor":"wolfi","product":"sqlpad-compat","name":"sqlpad-compat","label":"sqlpad-compat","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/sqlpad-compat","purlType":"apk","versions":[{"text":"< 7.5.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.5.0-r1","eol":null,"hubHref":null},{"vendor":"debian","product":"node-express","name":"node-express","label":"node-express","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/node-express","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 4.21.0+~cs8.36.26-1","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 4.21.0+~cs8.36.26-1","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"node-express","name":"node-express","label":"node-express","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/node-express","purlType":"deb","versions":[{"text":"< 4.1.1~dfsg-1ubuntu0.16.04.1~esm1","noFixRecorded":false,"fixedIn":null},{"text":"< 4.1.1~dfsg-1ubuntu0.18.04.1~esm1","noFixRecorded":false,"fixedIn":null},{"text":"< 4.17.1-2ubuntu0.1~esm1","noFixRecorded":false,"fixedIn":null},{"text":"< 4.17.3+~4.17.13-1ubuntu0.1~esm1","noFixRecorded":false,"fixedIn":null},{"text":"< 4.19.2+~cs8.36.21-1ubuntu0.1~esm1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.1.1~dfsg-1ubuntu0.16.04.1~esm1 | < 4.1.1~dfsg-1ubuntu0.18.04.1~esm1 | < 4.17.1-2ubuntu0.1~esm1 | < 4.17.3+~4.17.13-1ubuntu0.1~esm1 | < 4.19.2+~cs8.36.21-1ubuntu0.1~esm1","eol":null,"hubHref":null},{"vendor":"expressjs","product":"express","name":"express","label":"express","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 4.20.0","noFixRecorded":false,"fixedIn":null},{"text":"≥ 5.0.0-alpha.1, < 5.0.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.20.0 | ≥ 5.0.0-alpha.1, < 5.0.0","eol":null,"hubHref":"/vendor/expressjs/express"},{"vendor":"Npm","product":"express","name":"express","label":"express","ecosystem":"Npm","cpePart":null,"purl":"pkg:npm/express","purlType":"npm","versions":[{"text":"< 4.20.0","noFixRecorded":false,"fixedIn":null},{"text":"≥ 5.0.0-alpha.1, < 5.0.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.20.0 | ≥ 5.0.0-alpha.1, < 5.0.0","eol":null,"hubHref":null},{"vendor":"openjsf","product":"express","name":"express","label":"express","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 4.20.0","noFixRecorded":false,"fixedIn":null},{"text":"5.0.0:alpha1","noFixRecorded":false,"fixedIn":null},{"text":"5.0.0:alpha2","noFixRecorded":false,"fixedIn":null},{"text":"5.0.0:alpha3","noFixRecorded":false,"fixedIn":null},{"text":"5.0.0:alpha4","noFixRecorded":false,"fixedIn":null},{"text":"5.0.0:alpha5","noFixRecorded":false,"fixedIn":null},{"text":"5.0.0:alpha6","noFixRecorded":false,"fixedIn":null},{"text":"5.0.0:alpha7","noFixRecorded":false,"fixedIn":null},{"text":"5.0.0:alpha8","noFixRecorded":false,"fixedIn":null},{"text":"5.0.0:beta1","noFixRecorded":false,"fixedIn":null},{"text":"5.0.0:beta2","noFixRecorded":false,"fixedIn":null},{"text":"5.0.0:beta3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.20.0 | 5.0.0:alpha1 | 5.0.0:alpha2 | 5.0.0:alpha3 | 5.0.0:alpha4 | 5.0.0:alpha5 | 5.0.0:alpha6 | 5.0.0:alpha7 | 5.0.0:alpha8 | 5.0.0:beta1 | 5.0.0:beta2 | 5.0.0:beta3","eol":{"isEol":false,"eolDate":null,"matchMethod":"cpe","cycle":{"name":"5","label":"5","eolFrom":null,"isLts":false,"isMaintained":true,"latestVersion":"5.3.0"},"product":{"name":"express","label":"Express","category":"framework"}},"hubHref":"/vendor/openjsf/express"}],"affectedCount":38,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://github.com/expressjs/express/security/advisories/GHSA-qw6h-vgh9-j6wx","label":"github.com/expressjs/express/security/advisories/GHSA-qw6h-vgh9-j6wx","hostname":"github.com","tags":["X Refsource CONFIRM","REPORT","Advisory","WEB","Vendor Advisory"]},{"url":"https://github.com/expressjs/express/commit/54271f69b511fea198471e6ff3400ab805d6b553","label":"github.com/expressjs/express/commit/54271f69b511fea198471e6ff3400ab805d6b553","hostname":"github.com","tags":["X Refsource MISC","FIX","WEB","Patch"]},{"url":"https://ubuntu.com/security/CVE-2024-43796","label":"ubuntu.com/security/CVE-2024-43796","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-43796","label":"www.cve.org/CVERecord?id=CVE-2024-43796","hostname":"www.cve.org","tags":["REPORT"]},{"url":"https://ubuntu.com/security/notices/USN-7581-1","label":"ubuntu.com/security/notices/USN-7581-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2024-43796","label":"security-tracker.debian.org/tracker/CVE-2024-43796","hostname":"security-tracker.debian.org","tags":["Advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/43xxx/CVE-2024-43796.json","label":"github.com/CVEProject/cvelistV5/tree/main/cves/2024/43xxx/CVE-2024-43796.json","hostname":"github.com","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-43796","label":"nvd.nist.gov/vuln/detail/CVE-2024-43796","hostname":"nvd.nist.gov","tags":["Advisory","Oval"]},{"url":"https://github.com/expressjs/express","label":"github.com/expressjs/express","hostname":"github.com","tags":["PACKAGE"]}],"lineage":{"upstream":[],"downstream":["USN-7581-1"],"duplicates":[],"related":["CGA-7RMH-796C-QMQ8","CGA-8W92-879X-F9WC","CGA-HC9X-JC27-5P4R","CGA-JQ8V-JX6X-3FPC","USN-7581-1"]},"timeline":[{"kind":"published","date":"2024-09-10T14:36:27.380Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-09-10T15:58:45.956Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":20,"level":"low","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-21T01:12:34.824Z","stale":false,"partial":false}}