July 2026 Security Releases
A security release for body-parser has been published. We recommend that all users upgrade as soon as possible.
The Express.js Blog
News and updates about express.js
Live Last read · last published · next check
Latest posts
June 2026 Security Releases
Security releases for multer and morgan have been published. We recommend that all users upgrade as soon as possible.
May 2026 Security Releases
Security releases for multiparty have been published. We recommend that all users upgrade as soon as possible.
A New Look for Express
Discover the redesigned Express.js website and our brand-new logo, built from the ground up with Astro.
March 2026 Security Releases
Security releases for path-to-regexp have been published. We recommend that all users upgrade as soon as possible.
February 2026 Security Releases
Security release for multer has been published. We recommend that all users upgrade as soon as possible.
November 2025 Security Releases
Security release for body-parser has been published. We recommend that all users upgrade as soon as possible.
July 2025 Security Releases
Security releases for Multer and On-headers has been published. We recommend that all users upgrade as soon as possible.
June 2025 Security Releases
Security update for Multer released. All users are encouraged to upgrade.
How Express.js Rebuilt Its Vulnerability Reporting Process
Express.js has overhauled its vulnerability reporting workflow with a unified process, consolidated documentation, and GitHub Security Advisories enabled across all repositories.
May 2025 Security Releases
Security release for Multer has been published. We recommend that all users upgrade as soon as possible.
Spring Cleaning in Express.js: Deprecations and the Path Ahead
As part of a broader effort to modernize and streamline Express.js, we’ve deprecated several outdated packages including csurf, connect-multiparty, and path-match. Learn why we made these changes and what it means for the future of the framework.
Express@5.1.0: Now the Default on npm with LTS Timeline
Express 5.1.0 is now the default on npm, and we're introducing an official LTS schedule for the v4 and v5 release lines.
A New Chapter for Express.js: Triumphs of 2024 and an ambitious 2025
Explore the transformative journey of Express.js in 2024, marked by governance improvements, the long-awaited release of Express 5.0, and heightened security measures. Look into the ambitious plans for 2025, including performance optimizations, scoped packages, and a bold roadmap for sustained growth in the Node.js ecosystem.
Express.js Security Audit: A Milestone Achievement
Celebrating the successful completion of the Express.js security audit conducted by Ada Logics and facilitated by OSTIF.
Introducing Express v5: A New Era for the Node.js Framework
Announcing the release of Express version 5
Express Never Ending Support Launched by HeroDevs and Express.js
The Express.js team is pleased to announce a partnership with HeroDevs to launch Express Never-Ending Support (NES), providing long-term support for applications built with legacy Express. This collaboration ensures that developers relying on older versions of the framework will continue to receive critical security and compatibility updates, allowing them to maintain and scale their applications…
September 2024 Security Releases
Security releases for Express, body-parser, send, serve-static, and path-to-regexp have been published. We recommend that all users upgrade as soon as possible.
Welcome to The Express Blog!
Introducing the new Express blog — a primary platform for announcements, updates, and communication from the Express technical committee.