find-my-way
9.10.0 · 10 Oct 2026MIT28.1M / weekRepositoryHomepagenpmAtom feed
Upgrading find-my-way From 7.2.0 to 9.7.0
23 releases in betweennotes for 21
Reading releases, release notes and advisories…
Counted from 21 of 23 release notes. Advisories are counted from the advisory database, in full.
Before you upgrade
Tick each one off as you go- breaking9.0.0
Security
Fixes 2 advisories affecting 7.2.0
- find-my-way: DDoS with HTTP2high · GHSA-c96f-x56v-gq3h
- find-my-way has a ReDoS vulnerability in multiparametric routeshigh · GHSA-rrr8-f88r-h8q6
- 9.0.1
Fixes: github.com/delvedor/find-my-way/security/adviso… CVE-2024-45813
Release by release
- new
host: Cache regex lookup results in HostStorage
- fixed
Backtrack on regex param mismatch
- fixed
Apply root path fallback for optional params in off()
- fixed
Prevent done from being called multiple times on async constraint errors
- fixed
Align isParamSafe state in findRoute with _on
- fixed
Avoid crash on undefined regex capture during route lookup
- new
- new
Optimize bitmask handler retrieval using Math.clz32
- new
Add onMaxParamLength to support 414 URI Too Long
- new
- new
Expose path normalization utility methods
- new
Expose path utility methods and document them
- fixed
Ignore inherited constraint keys
- new
- new
Expose sanitizeUrlPath
- new
- new
Improve string operations
- new
Use map for sting-based stores
- new
Refactor escapeRegExp and removeDuplicateSlashes functions
- fixed
Missing the param done of lookup method
- new
9.2.0no release note
- fixed
Add QUERY to httpMethods which was added in Node 22.2.0
- fixed
- security
Fixes: github.com/delvedor/find-my-way/security/adviso… CVE-2024-45813
- security
7 other lines we could not sort, mostly version bumps
- 9.3.0
Feat/node test runner
- 9.0.0
Drop old nodes
- 8.2.0
Update contraint check to throw with 32 handlers
- 8.2.0
Achieve 100% test coverage
- 8.2.0
Exclude Node v14 and v16 on macos
- 8.0.0
Swap sentences in docs
- 7.6.1
Made the validate function of the ContraintStrategy in the typescript…
35 internal lines (docs, tests, tooling) left out.