-
-
Notifications
You must be signed in to change notification settings - Fork 23.7k
Pull requests: expressjs/express
Author
Label
Projects
Milestones
Reviews
Assignee
Sort
Pull requests list
fix: prevent host header injection by sanitizing userinfo in Host header
#7317
opened Jun 16, 2026 by
bjohansebas
Member
Loading…
fix: handle Infinity/NaN maxAge in res.cookie() without crashing
#7287
opened May 28, 2026 by
Mohammad-Faiz-Cloud-Engineer
Loading…
fix: normalize all-slash mount paths in app.use to '/'
#7286
opened May 28, 2026 by
youcefzemmar
Loading…
fix: remove implicit Content-Type magic in res.set (#7145)
#7283
opened May 26, 2026 by
luvsharma6342
Loading…
feat: handle circular structure serialization
#7275
opened May 22, 2026 by
leandro-costa-oliveira
Loading…
feat: add diagnostic channels for request lifecycle
#7171
opened Apr 7, 2026 by
OussemaNehdi
Loading…
fix: fall back to JSON when JSONP callback sanitizes to empty
#7161
opened Apr 4, 2026 by
andrewstellman
Loading…
4 tasks done
build(deps-dev): bump hbs from 4.2.0 to 4.2.1
dependencies
Pull requests that update a dependency file
javascript
Pull requests that update javascript code
#7152
opened Apr 2, 2026 by
dependabot
Bot
Loading…
fix: keep repeated extended query params as arrays beyond 20 values
5.x
awaiting reviewer
#7151
opened Apr 1, 2026 by
wwenrr
Loading…
fix(res.set): remove implicit mime lookup and charset injection for Content-Type
#7146
opened Apr 1, 2026 by
Pandey-Krishnaa
Loading…
fix: add path containment check in View.prototype.lookup()
#7142
opened Mar 31, 2026 by
som14062005
Loading…
Fix fallback for unknown Content-Type values (#7034)
#7132
opened Mar 27, 2026 by
raashish1601
Loading…
fix: handle BigInt status codes in res.status() and res.sendStatus()
#7130
opened Mar 26, 2026 by
JivinSardine
Loading…
clarify express-generator is still 4.x
docs
Documentations issues
#7119
opened Mar 21, 2026 by
AzmeerX
Loading…
Fix query parameter truncation with configurable limit (fixes #5878)
#7117
opened Mar 21, 2026 by
nmurrell07
Loading…
achieve 100% test coverage in expressjs
#7112
opened Mar 18, 2026 by
bhavya3024
Contributor
Loading…
Unit test cases for uncovered lines for response.js file
tests
#7105
opened Mar 15, 2026 by
ashish3011
Contributor
Loading…
fix: replace deprecated module.parent with require.main === module in…
examples
#7092
opened Mar 9, 2026 by
sehrishanam1
Loading…
refactor(deps): migrate express-session from v1.18.1 to v1.19.0
#7061
opened Feb 23, 2026 by
digital-wizard48
Loading…
refactor(deps): migrate connect-redis from v8 to v9
#7059
opened Feb 23, 2026 by
digital-wizard48
Loading…
fix: make view engine extension matching case-insensitive
#7051
opened Feb 21, 2026 by
erdinccurebal
Loading…
3 tasks done
Previous Next
ProTip!
no:milestone will show everything without a milestone.