express vulnerable to XSS via response.redirect() CVSS base score is 3.1 (LOW severity). The EPSS exploit prediction model gives this CVE a 0.1% probability of exploitation in the next 30 days, placing it in the 31th percentile of all tracked vulnerabilities. This vulnerability is not currently on the CISA Known Exploited Vulnerabilities catalog. Affects 2 packages across the dependency graph; review the affected version ranges below and upgrade to a fixed release where available.