Skip to content
OpenAdvisories

Package · npm

find-my-way

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • High 7.5
    CVE-2026-47219

    find-my-way is Vulnerable to DDoS with HTTP2

    find-my-way is a framework-independent HTTP router that internally uses a Radix Tree and supports route parameters and wildcards. Versions prior to 9.7.0 are vulnerable to remotely triggerable DoS in find-my-way when it is used with Node's HTTP/2 server. The …

    delvedor find-my-way find-my-way npm
  • Medium 5.3
    CVE-2024-45813

    ReDoS vulnerability in multiparametric routes in find-my-way

    find-my-way is a fast, open source HTTP router, internally using a Radix Tree (aka compact Prefix Tree), supports route params, wildcards, and it's framework independent. A bad regular expression is generated any time one has two parameters within a single se…

    delvedor find-my-way find-my-way npm
  • Medium 5.9
    CVE-2020-7764

    Web Cache Poisoning

    This affects the package find-my-way before 2.2.5, from 3.0.0 and before 3.0.5. It accepts the Accept-Version' header by default, and if versioned routes are not being used, this could lead to a denial of service. Accept-Version can be used as an unkeyed head…

    find-my-way npm