Update dependency express to v4.22.0 (main) - #23
Security Report
❌ New vulnerabilities:
| Vulnerability | Severity |  CVSS Score |
Exploit Maturity | EPSS | Vulnerable Library | Direct Library | Suggested Fix | Issue | Reachability |
|---|---|---|---|---|---|---|---|---|---|
CVE-2026-8723Path to dependency file: /package.json Path to vulnerable library: /package.json Dependency Hierarchy: -> express-4.22.0.tgz (Root Library) -> ❌ qs-6.14.2.tgz (Vulnerable Library) |
 Medium |
5.3 | Not Defined | 0.358% | Transitive qs-6.14.2.tgz |
express-4.22.0.tgz | Transitive 6.15.2 |
None |
|
CVE-2026-82417Path to dependency file: /package.json Path to vulnerable library: /package.json Dependency Hierarchy: -> express-4.22.0.tgz (Root Library) -> ❌ qs-6.14.2.tgz (Vulnerable Library) |
Medium |
5.3 | Not Defined | 0.261% | Transitive qs-6.14.2.tgz |
express-4.22.0.tgz | Transitive qs - 6.16.0,qs - 6.16.0,https://github.com/ljharb/qs.git - v6.16.0 |
None |
|
CVE-2026-82562Path to dependency file: /package.json Path to vulnerable library: /package.json Dependency Hierarchy: -> express-4.22.0.tgz (Root Library) -> ❌ qs-6.14.2.tgz (Vulnerable Library) |
 Low |
3.7 | Not Defined | 0.317% | Transitive qs-6.14.2.tgz |
express-4.22.0.tgz | Transitive qs - 6.16.0,qs - 6.16.0,https://github.com/ljharb/qs.git - v6.16.0 |
None |
|
CVE-2026-82417Path to dependency file: /package.json Path to vulnerable library: /package.json Dependency Hierarchy: -> body-parser-1.20.6.tgz (Root Library) -> ❌ qs-6.15.3.tgz (Vulnerable Library) |
Medium |
5.3 | Not Defined | 0.261% | Transitive qs-6.15.3.tgz |
body-parser-1.20.6.tgz | Transitive qs - 6.16.0,qs - 6.16.0,https://github.com/ljharb/qs.git - v6.16.0 |
None |
|
CVE-2026-82562Path to dependency file: /package.json Path to vulnerable library: /package.json Dependency Hierarchy: -> body-parser-1.20.6.tgz (Root Library) -> ❌ qs-6.15.3.tgz (Vulnerable Library) |
Low |
3.7 | Not Defined | 0.317% | Transitive qs-6.15.3.tgz |
body-parser-1.20.6.tgz | Transitive qs - 6.16.0,qs - 6.16.0,https://github.com/ljharb/qs.git - v6.16.0 |
None |
|
✔️ Remediated vulnerabilities:
| Vulnerability | Vulnerable Library |
|---|---|
| CVE-2026-82417 | qs-6.7.0.tgz |
| CVE-2024-47764 | cookie-0.4.0.tgz |
| CVE-2024-45590 | body-parser-1.19.0.tgz |
| CVE-2025-15284 | qs-6.7.0.tgz |
| CVE-2024-43799 | send-0.17.1.tgz |
| CVE-2024-29041 | express-4.17.1.tgz |
| CVE-2026-12590 | body-parser-1.19.0.tgz |
| CVE-2024-43800 | serve-static-1.14.1.tgz |
| CVE-2026-2391 | qs-6.7.0.tgz |
| CVE-2024-43796 | express-4.17.1.tgz |
| CVE-2022-24999 | qs-6.7.0.tgz |
| CVE-2024-52798 | path-to-regexp-0.1.7.tgz |
| CVE-2024-45296 | path-to-regexp-0.1.7.tgz |
| CVE-2026-4867 | path-to-regexp-0.1.7.tgz |
Base branch total remaining vulnerabilities: 32
Base branch commit: 8aee888f46a0a5feddff742a5797cab7e896e450
Total libraries scanned: 129
Scan token: 75b883bd103349d4bc6fcd8c788758f6