I’m happy to announce that Express.js documentation has a new look! 🎉
This was a huge team effort with more than a year of work behind it. Thanks to everyone involved for the support and dedication that made this launch possible.
expressjs.com/en/blog/2026-0…
🚀 Exciting Announcement today!
Express v5 is officially "latest" and we have started the maintenance period for v4. Read more about the release and our LTS plans in our blog post: expressjs.com/2025/03/31/v5-…
Thanks a lot @sanity_io for your financial contribution to Express on Open Collective opencollective.com/express 🎉 We are glad that you like and support Express!
🔒 The September 2024 Security Release Report for the #Express (@UseExpressJS) ecosystem is now live.
We have patched:
👉 2 High severity
👉 4 Medium severity
⬆️ Please upgrade and use the latest versions. Check all the details: expressjs.com/2024/09/29/sec…
Something for the entire @nodejs ecosystem to celebrate... @UseExpressJS finally released 5.0... has been a journey for the project.... the new team behind it is amazing, Thanks for all the hard work there, @wesleytodd
Unsung hero, which I am very honored to work with... Everyone, let's also thank @kom_256 , @UseExpressJS the most used framework in the @nodejs ecosystem, is healty and alive... the future looks bright...
🛡️🔒 | The Security Triage team from @useexpressjs has released patches for several vulnerabilities.
In this thread, you can find all the details:👇 #Security#Express#Patches
CVE-2024-43800 (moderate) in Serve-static
passing untrusted user input - even after sanitizing it - to redirect() may execute untrusted code
github.com/expressjs/serve-s…
CVE-2024-43799 (moderate) in Send.
passing untrusted user input - even after sanitizing it - to SendStream.redirect() may execute untrusted code
github.com/pillarjs/send/sec…
CVE-2024-43796 (moderate) in Express.
In express <4.20.0, passing untrusted user input - even after sanitizing it - to response.redirect() may execute untrusted code
github.com/expressjs/express…