Skip to content
OpenAdvisories

Package · Debian

node-path-to-regexp

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.9
    CVE-2026-4923

    path-to-regexp vulnerable to Regular Expression Denial of Service via multiple wildcards

    Impact: When using multiple wildcards, combined with at least one parameter, a regular expression can be generated that is vulnerable to ReDoS. This backtracking vulnerability requires the second wildcard to be somewhere other than the end of the path. Unsafe…

    path-to-regexp path-to-regexp path-to-regexp node-path-to-regexp Debian npm