Skip to content

Express-rate-limit Project Express-rate-limit vulnerabilities

express-rate-limitexpress-rate-limit: IPv4-mapped IPv6 addresses bypass per-client rate limiting (all IPv4 clients share one bucket on dual-stack servers)CVE-2026-30827Fix available7.5 HighMarch 6, 2026