pillarjs/path-to-regexp Security Advisories | GitStock

medium2026-03-27

path-to-regexp vulnerable to Regular Expression Denial of Service via multiple wildcards

GHSA-27v5-c462-wpq7 · CVE-2026-4923

high2026-03-27

path-to-regexp vulnerable to Denial of Service via sequential optional groups

GHSA-j3q9-mxjg-w52f · CVE-2026-4926

high2026-03-27

path-to-regexp vulnerable to Regular Expression Denial of Service via multiple route parameters

GHSA-37ch-88jc-xwx2 · CVE-2026-4867

high2024-12-05

path-to-regexp contains a ReDoS

GHSA-rhx6-c78j-4q9w · CVE-2024-52798

high2024-09-09

path-to-regexp outputs backtracking regular expressions

GHSA-9wv6-86v2-598j · CVE-2024-45296