Repository Issue Activity (beta)

#7391 body-parser < 2.3.0 fails open on invalid `limit` (CVE-2026-12590)

#7350 res.render()/app.render() throws opaque TypeError for a view name ending in "."

#4282 Dependencies (5.0)

#7422 Outdated FOSS used in express

#7362 res.send(ArrayBuffer) silently sends {} as JSON

#4059 Rewriting req.url in router with prefix path results in missing slash (/)

#7412 Add migration guide from Express 4 to Express 5

#6370 wrong signature for req.body and next()

#7397 Bump hbs (dev) dependency to 4.2.1

#2526 path specific error handler not called

#2564 Shouldn't app.set("case sensitive routing") propagate to new Routers?

#2698 debug module with dynamic behavior (enable/disable in runtime)

#2739 Question: Is there a way to identify a route and create href link to it?

#2708 Feature request View global option ignore extname

#2563 Simplify app.all and app.VERB

#2562 Application may be a class

#2511 Reject routes containing an unescaped space character

#2483 Route param error handle

#2414 route() should handle 405 Method not allowed

#6353 Support diagnostic channels

#4099 Change the interface for setting application settings

#2756 feat: Support typed params in routes

#5288 Express 4 and 5 `req.get` doesnt return header if not set in lowercase

#7370 [SPAM]

#7348 Missing test coverage for req.is() with an array argument