Known Vulnerabilities for Expression Web by Microsoft
Listed below are 10 of the newest known vulnerabilities associated with "Expression Web" by "Microsoft".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-41285 json | In OpenBSD through 7.8, the slaacd and rad daemons have an infinite loop when they receive a crafted ICMPv6 Neighbor Discover... | Not Provided | 2026-04-21 | 2026-04-21 |
| CVE-2026-41282 json | ProjectDiscovery Nuclei 3 before 3.8.0 allows DSL expression injection. This affects use of -env-vars for multi-step template... | Not Provided | 2026-04-20 | 2026-04-20 |
| CVE-2026-41040 json | GROWI provided by GROWI, Inc. is vulnerable to a regular expression denial of service (ReDoS) via a crafted input string. | Not Provided | 2026-04-23 | 2026-04-23 |
| CVE-2026-40887 json | Vendure is an open-source headless commerce platform. Starting in version 1.7.4 and prior to versions 2.3.4, 3.5.7, and 3.6.2... | Not Provided | 2026-04-21 | 2026-04-22 |
| CVE-2026-40478 json | Thymeleaf is a server-side Java template engine for web and standalone environments. Versions 3.1.3.RELEASE and prior contain... | Not Provided | 2026-04-17 | 2026-04-20 |
| CVE-2026-40477 json | Thymeleaf is a server-side Java template engine for web and standalone environments. Versions 3.1.3.RELEASE and prior contain... | Not Provided | 2026-04-17 | 2026-04-20 |
| CVE-2026-40319 json | Giskard is an open-source testing framework for AI models. In versions prior to 1.0.2b1, the RegexMatching check passes a use... | Not Provided | 2026-04-17 | 2026-04-17 |
| CVE-2026-40291 json | Chamilo LMS is an open-source learning management system. In versions prior to 2.0.0-RC.3, an insecure direct object modifica... | Not Provided | 2026-04-14 | 2026-04-15 |
| CVE-2026-40164 json | jq is a command-line JSON processor. Before commit 0c7d133c3c7e37c00b6d46b658a02244fdd3c784, jq used MurmurHash3 with a hardc... | Not Provided | 2026-04-14 | 2026-04-14 |
| CVE-2026-40087 json | LangChain is a framework for building agents and LLM-powered applications. Prior to 0.3.84 and 1.2.28, LangChain's f-string p... | Not Provided | 2026-04-09 | 2026-04-14 |