path-to-regexp
9.0.0 · 22 Oct 2026MIT310.6M / weekRepositoryHomepagenpmAtom feed
Upgrading path-to-regexp From 0.0.2 to 0.2.5
20 releases in betweennotes for 0
Reading releases, release notes and advisories…
- ?
- changes to make
- 2
- advisories fixed
- ?
- new
- ?
- fixes
Counted from 0 of 20 release notes. Advisories are counted from the advisory database, in full.
Security
1 advisory still affects 0.2.5
- path-to-regexp outputs backtracking regular expressionshigh · GHSA-9wv6-86v2-598j
Upgrading to 1.9.0 clears it.
Fixes 2 advisories affecting 0.0.2
- path-to-regexp vulnerable to Regular Expression Denial of Service via multiple route parametershigh · GHSA-37ch-88jc-xwx2
- path-to-regexp contains a ReDoShigh · GHSA-rhx6-c78j-4q9w