← Feed/CVE-2024-45296
HIGHCVE-2024-45296npmCVSS 7.5

path-to-regexp

Published

Description

path-to-regexp outputs backtracking regular expressions

Affected Versions

>=0.2.0>=0>=7.0.0>=2.0.0>=4.0.0
FIXED VERSIONS0.1.126.3.01.9.08.0.00.1.103.3.0

References

WEBhttps://github.com/pillarjs/path-to-regexp/security/advisories/GHSA-9wv6-86v2-598jADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2024-45296WEBhttps://github.com/pillarjs/path-to-regexp/commit/29b96b4a1de52824e1ca0f49a701183cc4ed476fWEBhttps://github.com/pillarjs/path-to-regexp/commit/60f2121e9b66b7b622cc01080df0aabda9eedee6WEBhttps://github.com/pillarjs/path-to-regexp/commit/925ac8e3c5780b02f58cbd4e52f95da8ad2ac485WEBhttps://github.com/pillarjs/path-to-regexp/commit/d31670ae8f6e69cbfd56e835742195b7d10942efWEBhttps://github.com/pillarjs/path-to-regexp/commit/f1253b47b347dcb909e3e80b0eb2649109e59894PACKAGEhttps://github.com/pillarjs/path-to-regexpWEBhttps://github.com/pillarjs/path-to-regexp/releases/tag/v6.3.0WEBhttps://security.netapp.com/advisory/ntap-20250124-0001WEBhttps://github.com/pillarjs/path-to-regexp/security/advisories/GHSA-rhx6-c78j-4q9wADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2024-52798WEBhttps://github.com/pillarjs/path-to-regexp/commit/f01c26a013b1889f0c217c643964513acf17f6a4WEBhttps://blakeembrey.com/posts/2024-09-web-redosWEBhttps://security.netapp.com/advisory/ntap-20250124-0002

Using path-to-regexp?

Scan your dependencies and detect this automatically on every PR.

Create free account