path-to-regexp
9.0.0 · 22 Oct 2026MIT310.6M / weekRepositoryHomepagenpmAtom feed
Your version
8.0.0
major1 Sep 20248.4.2 is the newest release of 8.x.
Security
Fixes 1 advisory that affected 7.2.0
- Highpath-to-regexp outputs backtracking regular expressionsGHSA-9wv6-86v2-598j · 9 Sep 2024Fixed in 8.0.0
2 advisories affect 8.0.0; 8.4.0 fixes them
- Highpath-to-regexp vulnerable to Denial of Service via sequential optional groupsGHSA-j3q9-mxjg-w52f · 27 Mar 2026Fixed in 8.4.0
- Moderatepath-to-regexp vulnerable to Regular Expression Denial of Service via multiple wildcardsGHSA-27v5-c462-wpq7 · 27 Mar 2026Fixed in 8.4.0
Release note
No note was found for 8.0.0 on GitHub or in the repository's changelog.