path-to-regexp
9.0.0 · 22 Oct 2026MIT310.6M / weekRepositoryHomepagenpmAtom feed
Upgrading path-to-regexp From 6.3.0 to 8.0.0
4 releases in betweennotes for 0
Reading releases, release notes and advisories…
Other targets from 6.3.0Latest9.0.0
8.0.0, 7.0.0 have no release note on GitHub or in the repository's changelog, so their breaking changes are missing from the counts below.
- ?
- changes to make
- 0
- advisories fixed
- ?
- new
- ?
- fixes
Counted from 0 of 4 release notes. Advisories are counted from the advisory database, in full.
Security
2 advisories still affect 8.0.0
- path-to-regexp vulnerable to Regular Expression Denial of Service via multiple wildcardsmoderate · GHSA-27v5-c462-wpq7
- path-to-regexp vulnerable to Denial of Service via sequential optional groupshigh · GHSA-j3q9-mxjg-w52f
Upgrading to 8.4.0 clears them.