path-to-regexp
9.0.0 · 22 Oct 2026MIT310.6M / weekRepositoryHomepagenpmAtom feed
Upgrading path-to-regexp From 7.2.0 to 8.0.0
1 release in betweennotes for 0
Reading releases, release notes and advisories…
Other targets from 7.2.0Latest9.0.0
8.0.0 has no release note on GitHub or in the repository's changelog, so its breaking changes are missing from the counts below.
- ?
- changes to make
- 1
- advisory fixed
- ?
- new
- ?
- fixes
Counted from 0 of 1 release notes. Advisories are counted from the advisory database, in full.
Security
2 advisories still affect 8.0.0
- path-to-regexp vulnerable to Regular Expression Denial of Service via multiple wildcardsmoderate · GHSA-27v5-c462-wpq7
- path-to-regexp vulnerable to Denial of Service via sequential optional groupshigh · GHSA-j3q9-mxjg-w52f
Upgrading to 8.4.0 clears them.
Fixes 1 advisory affecting 7.2.0
- path-to-regexp outputs backtracking regular expressionshigh · GHSA-9wv6-86v2-598j