PA
Product
path-to-regexp
by path-to-regexp · last CVE Mar 26, 2026
3
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 1Low 0
Watch

Add path-to-regexp to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-4926
7.5
1%
Mar 26
path-to-regexp vulnerable to Denial of Service via sequential optional groups
Affected: 8.0.0 before 8.4.0
CVE-2026-4867
7.5
1%
Mar 26
path-to-regexp vulnerable to Regular Expression Denial of Service via multiple route parameters
Affected: before 0.1.13
Showing 2