Express NODE_ENV 'development' Information Disclosure Vulnerability (HTTP) - Active Check

Description

Express is prone to an information disclosure vulnerability if the NODE_ENV environment variable is set to 'development'.

Remediation

Set the NODE_ENV environment variable to 'production'. Please see the references for more information.

Try Deep Scan Version

Give your DevOps team the freedom to innovate and create outstanding products without being held back by security concerns.