Express / Node.js security posture
Review linked rules in the directory and use Composer to export guardrails for your IDE. Detailed posture metrics will appear here as the catalog grows.
2 linked rules in the directory.
Top risks for this stack
00 critical04 high
multer vulnerable to Denial of Service via file descriptor leak on aborted uploadsHIGH
Sep 2026
No rule coverage yet — consider contributing a rule.
Multer vulnerable to Denial of Service via incomplete cleanup of aborted uploadsMEDIUM
Jun 2026
No rule coverage yet — consider contributing a rule.
body-parser is vulnerable to denial of service when url encoding is usedMEDIUM
Nov 2025
Rule coverage exists — verify in Composer export.
Express ressource injectionMEDIUM
Oct 2024
Rule coverage exists — verify in Composer export.
body-parser vulnerable to denial of service when url encoding is enabledHIGH
Sep 2024
Rule coverage exists — verify in Composer export.
Regular Expression Denial of Service (ReDoS) in lodashMEDIUM
Rule coverage exists — verify in Composer export.
Command Injection in lodashHIGH
Rule coverage exists — verify in Composer export.
jsonwebtoken unrestricted key type could lead to legacy keys usage HIGH
Rule coverage exists — verify in Composer export.