Skip to content
OpenAdvisories

Package · npm

find-my-way

3 known vulnerabilities.

2 results · Clear filters · Feed

  • Medium 5.3

    ReDoS vulnerability in multiparametric routes in find-my-way

    find-my-way is a fast, open source HTTP router, internally using a Radix Tree (aka compact Prefix Tree), supports route params, wildcards, and it's framework independent. A bad regular expression is generated any time one has two parameters within a single se…

  • Medium 5.9

    Web Cache Poisoning

    This affects the package find-my-way before 2.2.5, from 3.0.0 and before 3.0.5. It accepts the Accept-Version' header by default, and if versioned routes are not being used, this could lead to a denial of service. Accept-Version can be used as an unkeyed head…