CVE-2024-51999 - express improperly controls modification of query properties

CVE ID : CVE-2024-51999 Published : Dec. 1, 2025, 9:15 p.m. | 39 minutes ago Description : Express.js minimalist web framework for node. Prior to 5.2.0 and 4.22.0, when using the extended query parser in express ('query parser': 'extended'), the request.query object inherits all object prototype properties, but these properties can be overwritten by query string parameter keys that match the property names. This vulnerability is fixed in 5.2.0 and 4.22.0. Severity: 2.7 | LOW Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Source: Telegram CVE Monitor