CVE-2024-10491: Express ressource injection

The vulnerability documentation explicitly identifies the Express.response.links function as the source of improper sanitization. The function's role in building Link headers using dynamic parameters makes it susceptible to injection when special characters are not neutralized. The reproduction examples demonstrate exploitation via this function, and the CWE-74 classification confirms an injection pattern. The file path is inferred from Express's internal structure where response methods are typically defined.