The security policy can be found at https://github.com/expressjs/.github/blob/master/SECURITY.md
Security: jshttp/on-headers
Security
SECURITY.md
-
on-headers vulnerable to http response header manipulationGHSA-76c9-3jph-rj3q published
Jul 17, 2025 by ctcpipLow
Learn more about advisories related to jshttp/on-headers in the GitHub Advisory Database