CyberSecBulletin

Pillarjs vulnerabilities

We track 2 vulnerabilities in Pillarjs products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on December 5, 2024.

2vulnerabilities
0critical
2high
0exploited
7.6average CVSS score

Latest Pillarjs vulnerabilities

  • 7.7 High severity

    path-to-regexp: Inefficient Regular Expression Complexity

    CVE-2024-52798Pillarjs

    path-to-regexp turns path strings into a regular expressions. In certain cases, path-to-regexp will output a regular expression that can be exploited to cause poor performance. The regular expression that is vulnerable to backtracking can be generated in the 0

  • 7.5 High severity

    path-to-regexp: Inefficient Regular Expression Complexity

    CVE-2024-45296Pillarjs

    path-to-regexp turns path strings into a regular expressions. In certain cases, path-to-regexp will output a regular expression that can be exploited to cause poor performance. Because JavaScript is single threaded and regex matching runs on the main thread, p