NPM
Releases288
Frequency2 weeks 5 days
Last Release
Fast, unopinionated, minimalist web framework
CVE History
| CVE | Affected | Published | CVSS v3 | CVSS v2 |
|---|---|---|---|---|
| = 2.5.3 | — | 5.4 MEDIUM | ||
The EXPRESS (aka com.gpshopper.express.android) application 2.5.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. | ||||