pillarjs
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| path-to-regexp | 2 | – | Dec 5, 2024 |
| hbs | 1 | – | Aug 16, 2021 |
| send | 1 | – | Sep 10, 2024 |
Exploited and recent CVEs
- CVE-2024-52798 path-to-regexp Unpatched `path-to-regexp` ReDoS in 0.1.x 0.8%
- CVE-2024-43799 send vulnerable to template injection that can lead to XSS 0.5%
- CVE-2024-45296 path-to-regexp outputs backtracking regular expressions 0.9%
- CVE-2021-32822 File disclosure in hbs 1.0%