Description
By default, Express applications run in development mode. In development mode, Express returns more verbose errors which can result in information leakage. This also provides an attacker with information about the host system. It's recommended to configure Node.js to run in production mode.
Remediation
You can signal Node.js that you are running in production by setting the NODE_ENV=production environment variable.
References
Related Vulnerabilities
WordPress Plugin Product Input Fields for WooCommerce Arbitrary File Download (1.2.6)
WordPress Plugin Contact Form 7 Database Information Disclosure (1.3)
WordPress 5.2.x Multiple Vulnerabilities (5.2 - 5.2.18)
phpMyAdmin Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-6610)