{"ecosystem":"npm","package":"express","tool_id":"npm:express","listed":true,"list_version":"2026-11-05","as_of":"2026-11-05T15:52:43.504Z","version":"5.3.0","version_source":"registry_latest","security_status":"clear","status_basis":"no_match_on_version","verdict":"insufficient","advisories":{"source":"osv","checked":true,"checked_at":"2026-11-05T14:19:58.677Z","matching_version":0,"other_versions":5,"any_version":5,"malicious_records":0,"exploited_in_wild":0,"list":[{"id":"GHSA-qw6h-vgh9-j6wx","kind":"vulnerability","aliases":["CVE-2024-43796"],"affects_version":false,"fixed":["4.20.0","5.0.0"],"published":"2024-09-10T19:41:04Z","url":"https://osv.dev/vulnerability/GHSA-qw6h-vgh9-j6wx"},{"id":"GHSA-rv95-896h-c2vc","kind":"vulnerability","aliases":["CVE-2024-29041"],"affects_version":false,"fixed":["4.19.2","5.0.0-beta.3"],"published":"2024-03-25T19:40:26Z","url":"https://osv.dev/vulnerability/GHSA-rv95-896h-c2vc"},{"id":"GHSA-cm5g-3pgc-8rg4","kind":"vulnerability","aliases":["CVE-2024-10491"],"affects_version":false,"fixed":["4.0.0-rc1"],"published":"2024-10-29T18:30:37Z","url":"https://osv.dev/vulnerability/GHSA-cm5g-3pgc-8rg4"},{"id":"GHSA-jj78-5fmv-mv28","kind":"vulnerability","aliases":["CVE-2024-9266"],"affects_version":false,"fixed":["4.0.0-rc1"],"published":"2024-10-03T21:31:05Z","url":"https://osv.dev/vulnerability/GHSA-jj78-5fmv-mv28"},{"id":"GHSA-gpvr-g6gh-9mc2","kind":"vulnerability","aliases":["CVE-2014-6393"],"affects_version":false,"fixed":["3.11.0","4.5.0"],"published":"2018-10-23T17:22:54Z","url":"https://osv.dev/vulnerability/GHSA-gpvr-g6gh-9mc2"}],"list_url":"https://osv.dev/list?ecosystem=npm&q=express"},"field_reports":{"on_version":0,"outcomes":null,"people":0,"verified_people":0,"forge_score":null,"all_versions":0,"versions_reported":[],"tool_page_url":null},"skill_scan":null,"other_versions_flagged":[],"check":{"tool":"forge_check","mcp_server":"https://theagentforge.io/mcp/public","arguments":{"id":"npm:express","version":"5.3.0"},"rest_url":"https://theagentforge.io/api/v1/check?id=npm%3Aexpress&version=5.3.0","cli":"npx @theagentforge/cli check npm:express@5.3.0"},"sources":{"osv":"https://osv.dev/list?ecosystem=npm&q=express","registry":"https://www.npmjs.com/package/express","methodology":"https://theagentforge.io/methodology"},"page_url":"https://theagentforge.io/is-it-safe/npm/express","markdown_url":"https://theagentforge.io/is-it-safe/npm/express.md"}