path-to-regexp
9.0.0 · 22 Oct 2026MIT310.6M / weekRepositoryHomepagenpmAtom feed
Your version
8.4.0
26 Mar 20268.4.2 is the newest release of 8.x.
Security
Fixes 2 advisories that affected 8.3.0
- Highpath-to-regexp vulnerable to Denial of Service via sequential optional groupsGHSA-j3q9-mxjg-w52f · 27 Mar 2026Fixed in 8.4.0
- Moderatepath-to-regexp vulnerable to Regular Expression Denial of Service via multiple wildcardsGHSA-27v5-c462-wpq7 · 27 Mar 2026Fixed in 8.4.0
Release note
No note was found for 8.4.0 on GitHub or in the repository's changelog.