path-to-regexp vulnerabilities

2 known vulnerabilities in path-to-regexp from Pillarjs. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.7 High severity

  path-to-regexp: Inefficient Regular Expression Complexity

  CVE-2024-52798Dec 5, 2024Pillarjs

  path-to-regexp turns path strings into a regular expressions. In certain cases, path-to-regexp will output a regular expression that can be exploited to cause poor performance. The regular expression that is vulnerable to backtracking can be generated in the 0

• 7.5 High severity

  path-to-regexp: Inefficient Regular Expression Complexity

  CVE-2024-45296Sep 9, 2024Pillarjs

  path-to-regexp turns path strings into a regular expressions. In certain cases, path-to-regexp will output a regular expression that can be exploited to cause poor performance. Because JavaScript is single threaded and regex matching runs on the main thread, p