Upgrade Express version to mitigate the Open Redirect Vulnerability in Express.js for malformed URLs, specifically targeting versions below 4.19.2.

[ab14bhardwaj]

Issue Description

Description

• Versions of Express.js prior to 4.19.2 and pre-release alpha and beta versions before 5.0.0-beta.3 are affected by an open redirect vulnerability using malformed URLs.

Express versions

• Current: 4.18.2
• Latest: 4.19.2

Link to Reproduction

• expressjs/express@0867302
• https://nvd.nist.gov/vuln/detail/CVE-2024-29041

Reproduction Steps

No response

[ab14bhardwaj]

@trevor-scheer Can we merge this PR #7821 and release a patch if possible? or specifically, bump the express version and fix it?