News and updates about express.jshttps://expressjs.com/https://expressjs.com/en/blog/2026-07-31-security-releases/https://expressjs.com/en/blog/2026-07-31-security-releases/A security release for body-parser has been published. We recommend that all users upgrade as soon as possible.Fri, 31 Jul 2026 00:00:00 GMT<a href="https://expressjs.com/en/blog/2026-07-31-security-releases/">July 2026 Security Releases</a>Ulises Gasconhttps://github.com/UlisesGasconsecurityhttps://expressjs.com/en/blog/2026-06-30-security-releases/https://expressjs.com/en/blog/2026-06-30-security-releases/Security releases for multer and morgan have been published. We recommend that all users upgrade as soon as possible.Tue, 30 Jun 2026 00:00:00 GMT<a href="https://expressjs.com/en/blog/2026-06-30-security-releases/">June 2026 Security Releases</a>Ulises Gasconhttps://github.com/UlisesGasconsecurityhttps://expressjs.com/en/blog/2026-05-31-security-releases/https://expressjs.com/en/blog/2026-05-31-security-releases/Security releases for multiparty have been published. We recommend that all users upgrade as soon as possible.Sun, 31 May 2026 00:00:00 GMT<a href="https://expressjs.com/en/blog/2026-05-31-security-releases/">May 2026 Security Releases</a>Ulises Gasconhttps://github.com/UlisesGasconsecurityhttps://expressjs.com/en/blog/2026-05-18-a-new-look-for-express/https://expressjs.com/en/blog/2026-05-18-a-new-look-for-express/Discover the redesigned Express.js website and our brand-new logo, built from the ground up with Astro.Mon, 18 May 2026 00:00:00 GMT<a href="https://expressjs.com/en/blog/2026-05-18-a-new-look-for-express/">A New Look for Express</a>Sebastian Beltranhttps://github.com/bjohansebasannouncementshttps://expressjs.com/en/blog/2026-03-30-security-releases/https://expressjs.com/en/blog/2026-03-30-security-releases/Security releases for path-to-regexp have been published. We recommend that all users upgrade as soon as possible.Mon, 30 Mar 2026 00:00:00 GMT<a href="https://expressjs.com/en/blog/2026-03-30-security-releases/">March 2026 Security Releases</a>Ulises Gasconhttps://github.com/UlisesGasconsecurityhttps://expressjs.com/en/blog/2026-02-27-security-releases/https://expressjs.com/en/blog/2026-02-27-security-releases/Security release for multer has been published. We recommend that all users upgrade as soon as possible.Fri, 27 Feb 2026 00:00:00 GMT<a href="https://expressjs.com/en/blog/2026-02-27-security-releases/">February 2026 Security Releases</a>Ulises Gascónhttps://github.com/UlisesGasconsecurityhttps://expressjs.com/en/blog/2025-12-01-security-releases/https://expressjs.com/en/blog/2025-12-01-security-releases/Security release for body-parser has been published. We recommend that all users upgrade as soon as possible.Mon, 01 Dec 2025 00:00:00 GMT<a href="https://expressjs.com/en/blog/2025-12-01-security-releases/">November 2025 Security Releases</a>Ulises Gascónhttps://github.com/UlisesGasconsecurityhttps://expressjs.com/en/blog/2025-07-31-security-releases/https://expressjs.com/en/blog/2025-07-31-security-releases/Security releases for Multer and On-headers has been published. We recommend that all users upgrade as soon as possible.Thu, 31 Jul 2025 00:00:00 GMT<a href="https://expressjs.com/en/blog/2025-07-31-security-releases/">July 2025 Security Releases</a>Ulises Gascónhttps://github.com/UlisesGasconsecurityhttps://expressjs.com/en/blog/2025-07-18-security-releases/https://expressjs.com/en/blog/2025-07-18-security-releases/Security update for Multer released. All users are encouraged to upgrade.Fri, 18 Jul 2025 00:00:00 GMT<a href="https://expressjs.com/en/blog/2025-07-18-security-releases/">June 2025 Security Releases</a>Ulises Gascónhttps://github.com/UlisesGasconsecurityhttps://expressjs.com/en/blog/2025-06-05-vulnerability-reporting-process-overhaul/https://expressjs.com/en/blog/2025-06-05-vulnerability-reporting-process-overhaul/Express.js has overhauled its vulnerability reporting workflow with a unified process, consolidated documentation, and GitHub Security Advisories enabled across all repositories.Thu, 05 Jun 2025 00:00:00 GMT<a href="https://expressjs.com/en/blog/2025-06-05-vulnerability-reporting-process-overhaul/">How Express.js Rebuilt Its Vulnerability Reporting Process</a>Ulises Gascónhttps://github.com/UlisesGasconsecurityhttps://expressjs.com/en/blog/2025-05-19-security-releases/https://expressjs.com/en/blog/2025-05-19-security-releases/Security release for Multer has been published. We recommend that all users upgrade as soon as possible.Mon, 19 May 2025 00:00:00 GMT<a href="https://expressjs.com/en/blog/2025-05-19-security-releases/">May 2025 Security Releases</a>Ulises Gascónhttps://github.com/UlisesGasconsecurityhttps://expressjs.com/en/blog/2025-05-16-express-cleanup-legacy-packages/https://expressjs.com/en/blog/2025-05-16-express-cleanup-legacy-packages/As part of a broader effort to modernize and streamline Express.js, we’ve deprecated several outdated packages including csurf, connect-multiparty, and path-match. Learn why we made these changes and what it means for the future of the framework.Fri, 16 May 2025 00:00:00 GMT<a href="https://expressjs.com/en/blog/2025-05-16-express-cleanup-legacy-packages/">Spring Cleaning in Express.js: Deprecations and the Path Ahead</a>Express Technical Committeehttps://github.com/expressjsannouncementshttps://expressjs.com/en/blog/2025-03-31-v5-1-latest-release/https://expressjs.com/en/blog/2025-03-31-v5-1-latest-release/Express 5.1.0 is now the default on npm, and we're introducing an official LTS schedule for the v4 and v5 release lines.Mon, 31 Mar 2025 00:00:00 GMT<a href="https://expressjs.com/en/blog/2025-03-31-v5-1-latest-release/">Express@5.1.0: Now the Default on npm with LTS Timeline</a>Express Technical Committeehttps://github.com/expressjsannouncementshttps://expressjs.com/en/blog/2025-01-09-rewind-2024-triumphs-and-2025-vision/https://expressjs.com/en/blog/2025-01-09-rewind-2024-triumphs-and-2025-vision/Explore the transformative journey of Express.js in 2024, marked by governance improvements, the long-awaited release of Express 5.0, and heightened security measures. Look into the ambitious plans for 2025, including performance optimizations, scoped packages, and a bold roadmap for sustained growth in the Node.js ecosystem.Thu, 09 Jan 2025 00:00:00 GMT<a href="https://expressjs.com/en/blog/2025-01-09-rewind-2024-triumphs-and-2025-vision/">A New Chapter for Express.js: Triumphs of 2024 and an ambitious 2025</a>Express Technical Committeehttps://github.com/expressjsannouncementshttps://expressjs.com/en/blog/2024-10-22-security-audit-milestone-achievement/https://expressjs.com/en/blog/2024-10-22-security-audit-milestone-achievement/Celebrating the successful completion of the Express.js security audit conducted by Ada Logics and facilitated by OSTIF.Tue, 22 Oct 2024 00:00:00 GMT<a href="https://expressjs.com/en/blog/2024-10-22-security-audit-milestone-achievement/">Express.js Security Audit: A Milestone Achievement</a>Express Technical Committeehttps://github.com/expressjssecurityannouncementshttps://expressjs.com/en/blog/2024-10-15-v5-release/https://expressjs.com/en/blog/2024-10-15-v5-release/Announcing the release of Express version 5Tue, 15 Oct 2024 00:00:00 GMT<a href="https://expressjs.com/en/blog/2024-10-15-v5-release/">Introducing Express v5: A New Era for the Node.js Framework</a>Wes Toddhttps://github.com/wesleytoddExpress Technical Committeehttps://github.com/expressjsannouncementshttps://expressjs.com/en/blog/2024-10-01-herodevs-partnership-announcement/https://expressjs.com/en/blog/2024-10-01-herodevs-partnership-announcement/The Express.js team is pleased to announce a partnership with HeroDevs to launch Express Never-Ending Support (NES), providing long-term support for applications built with legacy Express. This collaboration ensures that developers relying on older versions of the framework will continue to receive critical security and compatibility updates, allowing them to maintain and scale their applications securely, even after the framework's official end-of-life.Tue, 01 Oct 2024 00:00:00 GMT<a href="https://expressjs.com/en/blog/2024-10-01-herodevs-partnership-announcement/">Express Never Ending Support Launched by HeroDevs and Express.js</a>Express Technical Committeehttps://github.com/expressjsannouncementshttps://expressjs.com/en/blog/2024-09-29-security-releases/https://expressjs.com/en/blog/2024-09-29-security-releases/Security releases for Express, body-parser, send, serve-static, and path-to-regexp have been published. We recommend that all users upgrade as soon as possible.Sun, 29 Sep 2024 00:00:00 GMT<a href="https://expressjs.com/en/blog/2024-09-29-security-releases/">September 2024 Security Releases</a>Ulises Gascónhttps://github.com/UlisesGasconsecurityhttps://expressjs.com/en/blog/2024-07-16-welcome-post/https://expressjs.com/en/blog/2024-07-16-welcome-post/Introducing the new Express blog — a primary platform for announcements, updates, and communication from the Express technical committee.Tue, 16 Jul 2024 00:00:00 GMT<a href="https://expressjs.com/en/blog/2024-07-16-welcome-post/">Welcome to The Express Blog!</a>Rand McKinneyhttps://github.com/crandmckChris Delhttps://github.com/chrisdel101announcements