AZL-44361 CVE-2024-29041 affecting package nodejs-nodemon 2.0.3-5

🗓️ 25 Mar 2024 21:15:46Reported by GoogleType

osv🔗 osv.dev👁 1 Views

Express open redirect in res.location and res.redirect with user provided URLs; affects pre release four nineteen and five beta.

Reporter	Title	Published	Views	Family All 95
IBM Security Bulletins	Security Bulletin: security vulnerabilities are addressed with IBM Business Automation Insights iFix for April 2024.	27 Apr 202413:48	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security QRadar EDR Software contains multiple vulnerabilities	8 Jul 202409:49	–	ibm
IBM Security Bulletins	Security Bulletin: PVR0501342 [Express - CVE-2024-29041 (Publicly disclosed vulnerability) ]	28 Jan 202522:08	–	ibm
IBM Security Bulletins	Security Bulletin: IBM watsonx Orchestrate Cartridge affected by vulnerability in express-4.17.3.tgz	7 Jul 202517:57	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ Appliance vulnerable to open redirect (CVE-2024-29041)	26 Jun 202422:29	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Verify Governance has multiple vulnerabilities	10 Jul 202416:31	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities fixed in IBM Security Verify Information Queue	5 Aug 202409:25	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite uses express-4.18.2.tgz which is vulnerable to CVE-2024-29041.	6 Jun 202406:30	–	ibm
IBM Security Bulletins	Security Bulletin: QRadar Advisor With Watson for IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	17 Mar 202513:46	–	ibm
IBM Security Bulletins	Security Bulletin: There are multiple vulnerabilities that can affect IBM Fusion HCI and IBM Fusion HCI for watsonx	31 May 202514:07	–	ibm

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-29041

21 Apr 2026 04:19Current

6.6Medium risk

Vulners AI Score6.6

CVSS 3.16.1

EPSS0.00154

SSVC