helmet vulnerabilities

help secure Express/Connect apps with various HTTP headers

Registry: npm
Latest: 8.3.0
License: MIT
Source: github.com/helmetjs/helmet (opens the source repository in a new tab)

No known advisories

OSV.dev, which includes the GitHub Advisory Database, has no advisories for helmet.

Which of your client projects still run an old helmet?

NPMscan reads the package-lock.json, yarn.lock and pnpm-lock.yaml in every GitHub repo you pick and checks each installed version against these advisories, including the packages your packages pull in. Each finding comes with the command that fixes it.

Scan a project free, no signup Or connect GitHub to scan every repo

Other npm packages

cors
http-proxy-middleware
http-proxy
vm2
shell-quote
tar
adm-zip
decompress

Advisory data from OSV.dev (opens OSV.dev in a new tab), refreshed daily. Package details from the npm registry.