Known vulnerabilities in basic-auth-connect
Vendor:
Express.js
Software:
basic-auth-connect
Software CPE:
cpe:2.3:a:expressjs:basic-auth-connect:*:*:*:*:*:*:*:*
Website:
https://expressjs.com/
Total vulnerabilities:
1
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.8
Breakdown by Severity Chart
Vulnerabilities (1)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU101764 - Information Exposure Through Timing Discrepancy CVE-2024-47178 |
CWE-208 | Medium | 1.1.0 | 13.12.2024 |
SB2024121312 SB2024121313 |