path-to-regexp

Products

ProductCVEsExploitedLatest
path-to-regexp3–Mar 26, 2026

Exploited and recent CVEs

  • CVE-2026-4923 Medium 5.9 path-to-regexp vulnerable to Regular Expression Denial of Service via multiple wildcards 0.4%
  • CVE-2026-4926 High 7.5 path-to-regexp vulnerable to Denial of Service via sequential optional groups 0.8%
  • CVE-2026-4867 High 7.5 path-to-regexp vulnerable to Regular Expression Denial of Service via multiple route parameters 0.5%