path-to-regexp
9.0.0 · 22 Oct 2026MIT310.6M / weekRepositoryHomepagenpmAtom feed
Upgrading path-to-regexp From 0.1.0 to 1.9.0
37 releases in betweennotes for 2
Reading releases, release notes and advisories…
1.0.0 has no release note on GitHub or in the repository's changelog, so its breaking changes are missing from the counts below.
- ?
- changes to make
- 3
- advisories fixed
- 1+
- new
- 1+
- fix
Counted from 2 of 37 release notes. Advisories are counted from the advisory database, in full.
Security
Fixes 3 advisories affecting 0.1.0
- path-to-regexp vulnerable to Regular Expression Denial of Service via multiple route parametershigh · GHSA-37ch-88jc-xwx2
- path-to-regexp outputs backtracking regular expressionshigh · GHSA-9wv6-86v2-598j
- path-to-regexp contains a ReDoShigh · GHSA-rhx6-c78j-4q9w
Release by release
- new
Add backtrack protection to 1.x release (#320) 925ac8e
- fixed
Fix
re.exec('/test/route')result (#267) 32a14b0
- new
0.1.1 – 1.8.036 releases, nothing new or fixed; 35 without a note
1 other line we could not sort, mostly version bumps
- 1.8.0
Backport
TokensToFunctionOptions