Express-rate-limit vulnerabilities
We track 1 vulnerability in Express-rate-limit products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on March 7, 2026.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest Express-rate-limit vulnerabilities
- 7.5 High severity
express-rate-limit: Allocation of Resources Without Limits or Throttling
express-rate-limit is a basic rate-limiting middleware for Express. In versions starting from 8.0.0 and prior to versions 8.0.2, 8.1.1, 8.2.2, and 8.3.0, the default keyGenerator in express-rate-limit applies IPv6 subnet masking (/56 by default) to all address