Homepage
About Snyk

express-cart vulnerabilities

A fully functioning Node.js shopping cart with Stripe, PayPal and Authorize.net payments.

Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the express-cart package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free
Vulnerability Vulnerable Version
  • H
Cross-site Request Forgery (CSRF)

<1.1.11
  • M
Cross-site Request Forgery (CSRF)

*
  • M
Cross-site Scripting (XSS)

*
  • H
SQL Injection

<1.1.8
  • C
Privilege Escalation

<1.1.6
  • C
Arbitrary Code Execution

<1.1.7

Package versions

1 - 19 of 19 Results
version published direct vulnerabilities
1.1.17 20 Mar, 2020
  • 0
    C
  • 0
    H
  • 2
    M
  • 0
    L
1.1.16 22 Jan, 2020
  • 0
    C
  • 0
    H
  • 2
    M
  • 0
    L
1.1.15 18 Dec, 2019
  • 0
    C
  • 0
    H
  • 2
    M
  • 0
    L
1.1.14 11 Nov, 2019
  • 0
    C
  • 0
    H
  • 2
    M
  • 0
    L
1.1.13 26 Oct, 2019
  • 0
    C
  • 0
    H
  • 2
    M
  • 0
    L
1.1.12 13 Jun, 2019
  • 0
    C
  • 0
    H
  • 2
    M
  • 0
    L
1.1.11 9 Feb, 2019
  • 0
    C
  • 0
    H
  • 2
    M
  • 0
    L
1.1.10 5 Oct, 2018
  • 0
    C
  • 1
    H
  • 2
    M
  • 0
    L
1.1.9 31 Aug, 2018
  • 0
    C
  • 1
    H
  • 2
    M
  • 0
    L
1.1.8 31 Aug, 2018
  • 0
    C
  • 1
    H
  • 2
    M
  • 0
    L
1.1.7 1 Jun, 2018
  • 0
    C
  • 2
    H
  • 2
    M
  • 0
    L
1.1.6 30 May, 2018
  • 1
    C
  • 2
    H
  • 2
    M
  • 0
    L
1.1.5 5 Feb, 2018
  • 2
    C
  • 2
    H
  • 2
    M
  • 0
    L
1.1.4 5 Feb, 2018
  • 2
    C
  • 2
    H
  • 2
    M
  • 0
    L
1.1.3 5 Feb, 2018
  • 2
    C
  • 2
    H
  • 2
    M
  • 0
    L
1.1.2 3 Feb, 2018
  • 2
    C
  • 2
    H
  • 2
    M
  • 0
    L
1.1.1 10 Jan, 2018
  • 2
    C
  • 2
    H
  • 2
    M
  • 0
    L
1.0.1 9 Jan, 2018
  • 2
    C
  • 2
    H
  • 2
    M
  • 0
    L
0.0.1-security 11 Jul, 2016
  • 2
    C
  • 2
    H
  • 2
    M
  • 0
    L