CVE-2026-126204 | express-rate-limit up to 8.7.1 MemoryStore race condition

November 12, 2026 Yanac

A vulnerability, which was classified as critical, was found in express-rate-limit up to 8.7.1. Affected by this vulnerability is an unknown functionality of the component MemoryStore. Executing a manipulation can lead to race condition.

This vulnerability is registered as CVE-2026-126204. It is possible to launch the attack remotely. No exploit is available.

You should upgrade the affected component.VulDB Recent EntriesRead More