AIKIDO-2025-10196
@remix-run/express is vulnerable to Improper Input Validation
60
Medium Risk
This Affects:
@remix-run/expressTL;DR
Affected versions of this package are vulnerable to URL manipulation and cache pollution due to inadequate port sanitization in the handling of the Host and X-Forwarded-Host headers. An attacker can exploit this weakness to manipulate request routing or poison caches, potentially leading to security issues such as cache poisoning attacks or unauthorized access.
Who does this affect?
You are affected if you are using a vulnerable version of the package.
Background info
@remix-run/express is vulnerable to Improper Input Validation in versions 2.2.0 - 2.16.2.
How to fix this
Upgrade the @remix-run/express library to the patch version.
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
SOC 2Compliant
ISO 27001Compliant