<?xml version="1.0" encoding="UTF-8"?><rss version="2.0" xmlns:content="http://purl.org/rss/1.0/modules/content/"><channel><title>The Express.js Blog</title><description>News and updates about express.js</description><link>https://expressjs.com/</link><item><title>May 2026 Security Releases</title><link>https://expressjs.com/en/blog/2026-05-31-security-releases/</link><guid isPermaLink="true">https://expressjs.com/en/blog/2026-05-31-security-releases/</guid><description>Security releases for multiparty have been published. We recommend that all users upgrade as soon as possible.</description><pubDate>Sun, 31 May 2026 00:00:00 GMT</pubDate><content:encoded>&lt;a href=&quot;https://expressjs.com/en/blog/2026-05-31-security-releases/&quot;&gt;May 2026 Security Releases&lt;/a&gt;</content:encoded><author><name>Ulises Gascon</name><uri>https://github.com/UlisesGascon</uri></author><category>security</category></item><item><title>A New Look for Express</title><link>https://expressjs.com/en/blog/2026-05-18-a-new-look-for-express/</link><guid isPermaLink="true">https://expressjs.com/en/blog/2026-05-18-a-new-look-for-express/</guid><description>Discover the redesigned Express.js website and our brand-new logo, built from the ground up with Astro.</description><pubDate>Mon, 18 May 2026 00:00:00 GMT</pubDate><content:encoded>&lt;a href=&quot;https://expressjs.com/en/blog/2026-05-18-a-new-look-for-express/&quot;&gt;A New Look for Express&lt;/a&gt;</content:encoded><author><name>Sebastian Beltran</name><uri>https://github.com/bjohansebas</uri></author><category>announcements</category></item><item><title>March 2026 Security Releases</title><link>https://expressjs.com/en/blog/2026-03-30-security-releases/</link><guid isPermaLink="true">https://expressjs.com/en/blog/2026-03-30-security-releases/</guid><description>Security releases for path-to-regexp have been published. We recommend that all users upgrade as soon as possible.</description><pubDate>Mon, 30 Mar 2026 00:00:00 GMT</pubDate><content:encoded>&lt;a href=&quot;https://expressjs.com/en/blog/2026-03-30-security-releases/&quot;&gt;March 2026 Security Releases&lt;/a&gt;</content:encoded><author><name>Ulises Gascon</name><uri>https://github.com/UlisesGascon</uri></author><category>security</category></item><item><title>February 2026 Security Releases</title><link>https://expressjs.com/en/blog/2026-02-27-security-releases/</link><guid isPermaLink="true">https://expressjs.com/en/blog/2026-02-27-security-releases/</guid><description>Security release for multer has been published. We recommend that all users upgrade as soon as possible.</description><pubDate>Fri, 27 Feb 2026 00:00:00 GMT</pubDate><content:encoded>&lt;a href=&quot;https://expressjs.com/en/blog/2026-02-27-security-releases/&quot;&gt;February 2026 Security Releases&lt;/a&gt;</content:encoded><author><name>Ulises Gascón</name><uri>https://github.com/UlisesGascon</uri></author><category>security</category></item><item><title>November 2025 Security Releases</title><link>https://expressjs.com/en/blog/2025-12-01-security-releases/</link><guid isPermaLink="true">https://expressjs.com/en/blog/2025-12-01-security-releases/</guid><description>Security release for body-parser has been published. We recommend that all users upgrade as soon as possible.</description><pubDate>Mon, 01 Dec 2025 00:00:00 GMT</pubDate><content:encoded>&lt;a href=&quot;https://expressjs.com/en/blog/2025-12-01-security-releases/&quot;&gt;November 2025 Security Releases&lt;/a&gt;</content:encoded><author><name>Ulises Gascón</name><uri>https://github.com/UlisesGascon</uri></author><category>security</category></item><item><title>July 2025 Security Releases</title><link>https://expressjs.com/en/blog/2025-07-31-security-releases/</link><guid isPermaLink="true">https://expressjs.com/en/blog/2025-07-31-security-releases/</guid><description>Security releases for Multer and On-headers has been published. We recommend that all users upgrade as soon as possible.</description><pubDate>Thu, 31 Jul 2025 00:00:00 GMT</pubDate><content:encoded>&lt;a href=&quot;https://expressjs.com/en/blog/2025-07-31-security-releases/&quot;&gt;July 2025 Security Releases&lt;/a&gt;</content:encoded><author><name>Ulises Gascón</name><uri>https://github.com/UlisesGascon</uri></author><category>security</category></item><item><title>June 2025 Security Releases</title><link>https://expressjs.com/en/blog/2025-07-18-security-releases/</link><guid isPermaLink="true">https://expressjs.com/en/blog/2025-07-18-security-releases/</guid><description>Security update for Multer released. All users are encouraged to upgrade.</description><pubDate>Fri, 18 Jul 2025 00:00:00 GMT</pubDate><content:encoded>&lt;a href=&quot;https://expressjs.com/en/blog/2025-07-18-security-releases/&quot;&gt;June 2025 Security Releases&lt;/a&gt;</content:encoded><author><name>Ulises Gascón</name><uri>https://github.com/UlisesGascon</uri></author><category>security</category></item><item><title>How Express.js Rebuilt Its Vulnerability Reporting Process</title><link>https://expressjs.com/en/blog/2025-06-05-vulnerability-reporting-process-overhaul/</link><guid isPermaLink="true">https://expressjs.com/en/blog/2025-06-05-vulnerability-reporting-process-overhaul/</guid><description>Express.js has overhauled its vulnerability reporting workflow with a unified process, consolidated documentation, and GitHub Security Advisories enabled across all repositories.</description><pubDate>Thu, 05 Jun 2025 00:00:00 GMT</pubDate><content:encoded>&lt;a href=&quot;https://expressjs.com/en/blog/2025-06-05-vulnerability-reporting-process-overhaul/&quot;&gt;How Express.js Rebuilt Its Vulnerability Reporting Process&lt;/a&gt;</content:encoded><author><name>Ulises Gascón</name><uri>https://github.com/UlisesGascon</uri></author><category>security</category></item><item><title>May 2025 Security Releases</title><link>https://expressjs.com/en/blog/2025-05-19-security-releases/</link><guid isPermaLink="true">https://expressjs.com/en/blog/2025-05-19-security-releases/</guid><description>Security release for Multer has been published. We recommend that all users upgrade as soon as possible.</description><pubDate>Mon, 19 May 2025 00:00:00 GMT</pubDate><content:encoded>&lt;a href=&quot;https://expressjs.com/en/blog/2025-05-19-security-releases/&quot;&gt;May 2025 Security Releases&lt;/a&gt;</content:encoded><author><name>Ulises Gascón</name><uri>https://github.com/UlisesGascon</uri></author><category>security</category></item><item><title>Spring Cleaning in Express.js: Deprecations and the Path Ahead</title><link>https://expressjs.com/en/blog/2025-05-16-express-cleanup-legacy-packages/</link><guid isPermaLink="true">https://expressjs.com/en/blog/2025-05-16-express-cleanup-legacy-packages/</guid><description>As part of a broader effort to modernize and streamline Express.js, we’ve deprecated several outdated packages including csurf, connect-multiparty, and path-match. Learn why we made these changes and what it means for the future of the framework.</description><pubDate>Fri, 16 May 2025 00:00:00 GMT</pubDate><content:encoded>&lt;a href=&quot;https://expressjs.com/en/blog/2025-05-16-express-cleanup-legacy-packages/&quot;&gt;Spring Cleaning in Express.js: Deprecations and the Path Ahead&lt;/a&gt;</content:encoded><author><name>Express Technical Committee</name><uri>https://github.com/expressjs</uri></author><category>announcements</category></item><item><title>Express@5.1.0: Now the Default on npm with LTS Timeline</title><link>https://expressjs.com/en/blog/2025-03-31-v5-1-latest-release/</link><guid isPermaLink="true">https://expressjs.com/en/blog/2025-03-31-v5-1-latest-release/</guid><description>Express 5.1.0 is now the default on npm, and we&apos;re introducing an official LTS schedule for the v4 and v5 release lines.</description><pubDate>Mon, 31 Mar 2025 00:00:00 GMT</pubDate><content:encoded>&lt;a href=&quot;https://expressjs.com/en/blog/2025-03-31-v5-1-latest-release/&quot;&gt;Express@5.1.0: Now the Default on npm with LTS Timeline&lt;/a&gt;</content:encoded><author><name>Express Technical Committee</name><uri>https://github.com/expressjs</uri></author><category>announcements</category></item><item><title>A New Chapter for Express.js: Triumphs of 2024 and an ambitious 2025</title><link>https://expressjs.com/en/blog/2025-01-09-rewind-2024-triumphs-and-2025-vision/</link><guid isPermaLink="true">https://expressjs.com/en/blog/2025-01-09-rewind-2024-triumphs-and-2025-vision/</guid><description>Explore the transformative journey of Express.js in 2024, marked by governance improvements, the long-awaited release of Express 5.0, and heightened security measures. Look into the ambitious plans for 2025, including performance optimizations, scoped packages, and a bold roadmap for sustained growth in the Node.js ecosystem.</description><pubDate>Thu, 09 Jan 2025 00:00:00 GMT</pubDate><content:encoded>&lt;a href=&quot;https://expressjs.com/en/blog/2025-01-09-rewind-2024-triumphs-and-2025-vision/&quot;&gt;A New Chapter for Express.js: Triumphs of 2024 and an ambitious 2025&lt;/a&gt;</content:encoded><author><name>Express Technical Committee</name><uri>https://github.com/expressjs</uri></author><category>announcements</category></item><item><title>Express.js Security Audit: A Milestone Achievement</title><link>https://expressjs.com/en/blog/2024-10-22-security-audit-milestone-achievement/</link><guid isPermaLink="true">https://expressjs.com/en/blog/2024-10-22-security-audit-milestone-achievement/</guid><description>Celebrating the successful completion of the Express.js security audit conducted by Ada Logics and facilitated by OSTIF.</description><pubDate>Tue, 22 Oct 2024 00:00:00 GMT</pubDate><content:encoded>&lt;a href=&quot;https://expressjs.com/en/blog/2024-10-22-security-audit-milestone-achievement/&quot;&gt;Express.js Security Audit: A Milestone Achievement&lt;/a&gt;</content:encoded><author><name>Express Technical Committee</name><uri>https://github.com/expressjs</uri></author><category>security</category><category>announcements</category></item><item><title>Introducing Express v5: A New Era for the Node.js Framework</title><link>https://expressjs.com/en/blog/2024-10-15-v5-release/</link><guid isPermaLink="true">https://expressjs.com/en/blog/2024-10-15-v5-release/</guid><description>Announcing the release of Express version 5</description><pubDate>Tue, 15 Oct 2024 00:00:00 GMT</pubDate><content:encoded>&lt;a href=&quot;https://expressjs.com/en/blog/2024-10-15-v5-release/&quot;&gt;Introducing Express v5: A New Era for the Node.js Framework&lt;/a&gt;</content:encoded><author><name>Wes Todd</name><uri>https://github.com/wesleytodd</uri></author><author><name>Express Technical Committee</name><uri>https://github.com/expressjs</uri></author><category>announcements</category></item><item><title>Express Never Ending Support Launched by HeroDevs and Express.js</title><link>https://expressjs.com/en/blog/2024-10-01-herodevs-partnership-announcement/</link><guid isPermaLink="true">https://expressjs.com/en/blog/2024-10-01-herodevs-partnership-announcement/</guid><description>The Express.js team is pleased to announce a partnership with HeroDevs to launch Express Never-Ending Support (NES), providing long-term support for applications built with legacy Express. This collaboration ensures that developers relying on older versions of the framework will continue to receive critical security and compatibility updates, allowing them to maintain and scale their applications securely, even after the framework&apos;s official end-of-life.</description><pubDate>Tue, 01 Oct 2024 00:00:00 GMT</pubDate><content:encoded>&lt;a href=&quot;https://expressjs.com/en/blog/2024-10-01-herodevs-partnership-announcement/&quot;&gt;Express Never Ending Support Launched by HeroDevs and Express.js&lt;/a&gt;</content:encoded><author><name>Express Technical Committee</name><uri>https://github.com/expressjs</uri></author><category>announcements</category></item><item><title>September 2024 Security Releases</title><link>https://expressjs.com/en/blog/2024-09-29-security-releases/</link><guid isPermaLink="true">https://expressjs.com/en/blog/2024-09-29-security-releases/</guid><description>Security releases for Express, body-parser, send, serve-static, and path-to-regexp have been published. We recommend that all users upgrade as soon as possible.</description><pubDate>Sun, 29 Sep 2024 00:00:00 GMT</pubDate><content:encoded>&lt;a href=&quot;https://expressjs.com/en/blog/2024-09-29-security-releases/&quot;&gt;September 2024 Security Releases&lt;/a&gt;</content:encoded><author><name>Ulises Gascón</name><uri>https://github.com/UlisesGascon</uri></author><category>security</category></item><item><title>Welcome to The Express Blog!</title><link>https://expressjs.com/en/blog/2024-07-16-welcome-post/</link><guid isPermaLink="true">https://expressjs.com/en/blog/2024-07-16-welcome-post/</guid><description>Introducing the new Express blog — a primary platform for announcements, updates, and communication from the Express technical committee.</description><pubDate>Tue, 16 Jul 2024 00:00:00 GMT</pubDate><content:encoded>&lt;a href=&quot;https://expressjs.com/en/blog/2024-07-16-welcome-post/&quot;&gt;Welcome to The Express Blog!&lt;/a&gt;</content:encoded><author><name>Rand McKinney</name><uri>https://github.com/crandmck</uri></author><author><name>Chris Del</name><uri>https://github.com/chrisdel101</uri></author><category>announcements</category></item></channel></rss>