# node-express security updates

Patch Radar has 15 security fixes for node-express, closing 5 CVEs. The newest is node-express 4.16.4-1 (4.16.4-1), released January 16, 2026.

- Web page: https://patchblox.com/security/product/linux/node-express
- Platform: Linux
- Supported: yes

## Security fixes, newest first

| Fix | Released | Fixed in | Priority | CVEs | Exploited |
|---|---|---|---|---:|---:|
| [node-express 4.16.4-1](https://patchblox.com/security/data/fix/linux/ubuntu-plucky-node-express-4.16.4-1.md) | Jan 16, 2026 | Ubuntu 25.04 (plucky) 4.16.4-1 | Routine | 1 | 0 |
| [node-express 4.19.2+~cs8.36.26-1ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-oracular-node-express-4.19.2-cs8.36.26-1ubuntu0.1.md) | Jan 16, 2026 | Ubuntu 24.10 (oracular) 4.19.2+~cs8.36.26-1ubuntu0.1 | Routine | 1 | 0 |
| [node-express 4.16.4-1](https://patchblox.com/security/data/fix/linux/ubuntu-oracular-node-express-4.16.4-1.md) | Jan 16, 2026 | Ubuntu 24.10 (oracular) 4.16.4-1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2024-10491](https://patchblox.com/security/data/fix/linux/debian-cve-2024-10491.md) | Oct 29, 2024 | Debian 12.15 (bookworm) 4.1.1~dfsg-1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2024-10491](https://patchblox.com/security/data/fix/linux/debian-cve-2024-10491.md) | Oct 29, 2024 | Debian 13.5 (trixie) 4.1.1~dfsg-1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2024-10491](https://patchblox.com/security/data/fix/linux/debian-cve-2024-10491.md) | Oct 29, 2024 | Debian 14 4.1.1~dfsg-1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2024-43796](https://patchblox.com/security/data/fix/linux/debian-cve-2024-43796.md) | Sep 10, 2024 | Debian 13.5 (trixie) 4.21.0+~cs8.36.26-1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2024-43796](https://patchblox.com/security/data/fix/linux/debian-cve-2024-43796.md) | Sep 10, 2024 | Debian 14 4.21.0+~cs8.36.26-1 | Routine | 1 | 0 |
| [node-express 4.1.1~dfsg-1ubuntu0.18.04.1~esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-node-express-4.1.1-dfsg-1ubuntu0.18.04.1-esm1.md) | Sep 10, 2024 | Ubuntu 18.04.6 LTS (bionic) 4.1.1~dfsg-1ubuntu0.18.04.1~esm1 | Routine | 2 | 0 |
| [node-express 4.17.1-2ubuntu0.1~esm1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-node-express-4.17.1-2ubuntu0.1-esm1.md) | Sep 10, 2024 | Ubuntu 20.04 LTS (focal) 4.17.1-2ubuntu0.1~esm1 | Routine | 2 | 0 |
| [node-express 4.17.3+~4.17.13-1ubuntu0.1~esm1](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-node-express-4.17.3-4.17.13-1ubuntu0.1-esm1.md) | Sep 10, 2024 | Ubuntu 22.04.1 LTS (jammy) 4.17.3+~4.17.13-1ubuntu0.1~esm1 | Routine | 2 | 0 |
| [node-express 4.19.2+~cs8.36.21-1ubuntu0.1~esm1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-node-express-4.19.2-cs8.36.21-1ubuntu0.1-esm1.md) | Sep 10, 2024 | Ubuntu 24.04.5 LTS (noble) 4.19.2+~cs8.36.21-1ubuntu0.1~esm1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2024-29041](https://patchblox.com/security/data/fix/linux/debian-cve-2024-29041.md) | Mar 25, 2024 | Debian 13.5 (trixie) 4.19.2+~cs8.36.21-1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2024-29041](https://patchblox.com/security/data/fix/linux/debian-cve-2024-29041.md) | Mar 25, 2024 | Debian 14 4.19.2+~cs8.36.21-1 | Routine | 1 | 0 |
| [node-express 4.17.1-2ubuntu0.1~esm2](https://patchblox.com/security/data/fix/linux/ubuntu-focal-node-express-4.17.1-2ubuntu0.1-esm2.md) | Nov 26, 2022 | Ubuntu 20.04 LTS (focal) 4.17.1-2ubuntu0.1~esm2 | High | 1 | 0 |

---

Data as of 2026-11-07T00:32:44Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo