path-to-regexp
9.0.0 · 22 Oct 2026MIT310.6M / weekRepositoryHomepagenpmAtom feed
Your version
8.3.0
2 Sep 20258.4.2 is the newest release of 8.x.
Security
2 advisories affect 8.3.0; 8.4.0 fixes them
- Highpath-to-regexp vulnerable to Denial of Service via sequential optional groupsGHSA-j3q9-mxjg-w52f · 27 Mar 2026Fixed in 8.4.0
- Moderatepath-to-regexp vulnerable to Regular Expression Denial of Service via multiple wildcardsGHSA-27v5-c462-wpq7 · 27 Mar 2026Fixed in 8.4.0
Release note
No note was found for 8.3.0 on GitHub or in the repository's changelog.