CVE-2024-43800

CVE-2024-43800 is present in IBM Maximo AI Service (Maximo AI Service 9.1.0 per the bulletin). The vulnerability affects the serve-static package where untrusted input passed to redirect() could execute untrusted code, even after sanitization. It is patched in serve-static 1.16.0. Remediation per...