[blue2cat]

Changes:

• Add blog post for GHSA-27r3-jxmh-p828

Notes:

• This post is written a little different than other posts on the Express blog, but I think it's helpful information for users who may wish to learn more about the vulnerability.
• Previewing the post, I see that it's styled as an alert on the home page, which I think is due to the Security tag. If that's undesirable, I'd be happy to add a post metadata flag that disables homepage display.

[netlify]

✅ Deploy Preview for expressjscom-preview ready!

Name	Link
🔨 Latest commit	46f39f7
🔍 Latest deploy log	https://app.netlify.com/projects/expressjscom-preview/deploys/6ae0be5307ad3d7d8695a5df
😎 Deploy Preview	https://deploy-preview-2545--expressjscom-preview.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.
Lighthouse	1 paths audited Performance: 99 (🟢 up 2 from production) Accessibility: 100 (no change from production) Best Practices: 100 (no change from production) SEO: 100 (no change from production) PWA: 80 (no change from production) View the detailed breakdown and full score reports
🤖 Make changes	Run an agent on this branch

---

To edit notification comments on pull requests, go to your Netlify project configuration.

[crandmck]

....it's styled as an alert on the home page, which I think is due to the Security tag. If that's undesirable, I'd be happy to add a post metadata flag that disables homepage display.

This seems reasonable given the severity of the issue, but I'll leave it to others who know the details better to make the final call. If we leave the home page warning, consider rewording it to match the first sentence of the post, which makes clearer the impact of the issue... The current text doesn't do that well IMO. See my suggested change.

[UlisesGascon]

I will do a deep review today and plan to ship it tomorrow 👍

[UlisesGascon]

Awesome work @blue2cat! 👏 👏

I integrated the changes from @crandmck in b7ee070 and some minor details on 46f39f7. Feedback super welcome 🙏

Also I did target the metadata and file for tomorrow 👍

[blue2cat]

@UlisesGascon your changes look good, thanks!