express-rate-limit vulnerabilities (npm)

1 vulnerability.

• express-rate-limit npm express-rate-limit: IPv4-mapped IPv6 addresses bypass per-client rate limiting (all IPv4 clients share one bucket on dual-stack servers) CVE-2026-30827 Fix available 7.5 HighMarch 6, 2026