Express.js Security FeedPosts tagged as security from the Express.js blog.https://expressjs.com/May 2026 Security Releaseshttps://expressjs.com/blog/2026-05-31-security-releases/https://expressjs.com/blog/2026-05-31-security-releases/Security releases for multiparty have been published. We recommend that all users upgrade as soon as possible.Sun, 31 May 2026 00:00:00 GMT<a href="https://expressjs.com/en/blog/2026-05-31-security-releases/">May 2026 Security Releases</a>Ulises Gasconhttps://github.com/UlisesGasconsecurityMarch 2026 Security Releaseshttps://expressjs.com/blog/2026-03-30-security-releases/https://expressjs.com/blog/2026-03-30-security-releases/Security releases for path-to-regexp have been published. We recommend that all users upgrade as soon as possible.Mon, 30 Mar 2026 00:00:00 GMT<a href="https://expressjs.com/en/blog/2026-03-30-security-releases/">March 2026 Security Releases</a>Ulises Gasconhttps://github.com/UlisesGasconsecurityFebruary 2026 Security Releaseshttps://expressjs.com/blog/2026-02-27-security-releases/https://expressjs.com/blog/2026-02-27-security-releases/Security release for multer has been published. We recommend that all users upgrade as soon as possible.Fri, 27 Feb 2026 00:00:00 GMT<a href="https://expressjs.com/en/blog/2026-02-27-security-releases/">February 2026 Security Releases</a>Ulises Gascónhttps://github.com/UlisesGasconsecurityNovember 2025 Security Releaseshttps://expressjs.com/blog/2025-12-01-security-releases/https://expressjs.com/blog/2025-12-01-security-releases/Security release for body-parser has been published. We recommend that all users upgrade as soon as possible.Mon, 01 Dec 2025 00:00:00 GMT<a href="https://expressjs.com/en/blog/2025-12-01-security-releases/">November 2025 Security Releases</a>Ulises Gascónhttps://github.com/UlisesGasconsecurityJuly 2025 Security Releaseshttps://expressjs.com/blog/2025-07-31-security-releases/https://expressjs.com/blog/2025-07-31-security-releases/Security releases for Multer and On-headers has been published. We recommend that all users upgrade as soon as possible.Thu, 31 Jul 2025 00:00:00 GMT<a href="https://expressjs.com/en/blog/2025-07-31-security-releases/">July 2025 Security Releases</a>Ulises Gascónhttps://github.com/UlisesGasconsecurityJune 2025 Security Releaseshttps://expressjs.com/blog/2025-07-18-security-releases/https://expressjs.com/blog/2025-07-18-security-releases/Security update for Multer released. All users are encouraged to upgrade.Fri, 18 Jul 2025 00:00:00 GMT<a href="https://expressjs.com/en/blog/2025-07-18-security-releases/">June 2025 Security Releases</a>Ulises Gascónhttps://github.com/UlisesGasconsecurityHow Express.js Rebuilt Its Vulnerability Reporting Processhttps://expressjs.com/blog/2025-06-05-vulnerability-reporting-process-overhaul/https://expressjs.com/blog/2025-06-05-vulnerability-reporting-process-overhaul/Express.js has overhauled its vulnerability reporting workflow with a unified process, consolidated documentation, and GitHub Security Advisories enabled across all repositories.Thu, 05 Jun 2025 00:00:00 GMT<a href="https://expressjs.com/en/blog/2025-06-05-vulnerability-reporting-process-overhaul/">How Express.js Rebuilt Its Vulnerability Reporting Process</a>Ulises Gascónhttps://github.com/UlisesGasconsecurityMay 2025 Security Releaseshttps://expressjs.com/blog/2025-05-19-security-releases/https://expressjs.com/blog/2025-05-19-security-releases/Security release for Multer has been published. We recommend that all users upgrade as soon as possible.Mon, 19 May 2025 00:00:00 GMT<a href="https://expressjs.com/en/blog/2025-05-19-security-releases/">May 2025 Security Releases</a>Ulises Gascónhttps://github.com/UlisesGasconsecurityExpress.js Security Audit: A Milestone Achievementhttps://expressjs.com/blog/2024-10-22-security-audit-milestone-achievement/https://expressjs.com/blog/2024-10-22-security-audit-milestone-achievement/Celebrating the successful completion of the Express.js security audit conducted by Ada Logics and facilitated by OSTIF.Tue, 22 Oct 2024 00:00:00 GMT<a href="https://expressjs.com/en/blog/2024-10-22-security-audit-milestone-achievement/">Express.js Security Audit: A Milestone Achievement</a>Express Technical Committeehttps://github.com/expressjssecurityannouncementsSeptember 2024 Security Releaseshttps://expressjs.com/blog/2024-09-29-security-releases/https://expressjs.com/blog/2024-09-29-security-releases/Security releases for Express, body-parser, send, serve-static, and path-to-regexp have been published. We recommend that all users upgrade as soon as possible.Sun, 29 Sep 2024 00:00:00 GMT<a href="https://expressjs.com/en/blog/2024-09-29-security-releases/">September 2024 Security Releases</a>Ulises Gascónhttps://github.com/UlisesGasconsecurity