Skip to content
OpenAdvisories

Vendor

path-to-regexp

3 known vulnerabilities.

Products

path-to-regexp 3
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.9
    CVE-2026-4923

    path-to-regexp vulnerable to Regular Expression Denial of Service via multiple wildcards

    Impact: When using multiple wildcards, combined with at least one parameter, a regular expression can be generated that is vulnerable to ReDoS. This backtracking vulnerability requires the second wildcard to be somewhere other than the end of the path. Unsafe…

    path-to-regexp path-to-regexp langfuse-3-worker vitess-23 Debian Wolfi npm