Skip to content
OpenAdvisories

Vendor

pillarjs

4 known vulnerabilities.

Products

path-to-regexp 2 hbs 1 send 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.7
    CVE-2024-52798

    path-to-regexp Unpatched `path-to-regexp` ReDoS in 0.1.x

    path-to-regexp turns path strings into a regular expressions. In certain cases, path-to-regexp will output a regular expression that can be exploited to cause poor performance. The regular expression that is vulnerable to backtracking can be generated in the …

    pillarjs path-to-regexp path-to-regexp npm
  • High 7.5
    CVE-2024-45296

    path-to-regexp outputs backtracking regular expressions

    path-to-regexp turns path strings into a regular expressions. In certain cases, path-to-regexp will output a regular expression that can be exploited to cause poor performance. Because JavaScript is single threaded and regex matching runs on the main thread, …

    pillarjs path-to-regexp node-express path-to-regexp Debian Ubuntu npm