PT-2026-28656

🗓️ 01 Jan 2026 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 4 Views

Path-to-regexp before 0.1.13: three or more params in a segment cause backtracking; upgrade or apply regex workaround.

Reporter	Title	Published	Views	Family All 145
IBM Security Bulletins	Security Bulletin: DevOps Test Performance contains a vulnerabilty related to use of the qs library	7 Apr 202615:44	–	ibm
IBM Security Bulletins	Security Bulletin: DataStage on Cloud Pak for Data has several vulnerabilities due to open source software	22 Jun 202614:27	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Edge Application Manager	17 Mar 202603:46	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise is vulnerable to multiple vulnerabilities due to Node.js module path-to-regexp	16 Jun 202610:39	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities affect IBM Decision Optimization for Cloud Pak for Data.	5 Jun 202610:12	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Datapower Operations Dashboard is vulnerable to Allocation of Resources Without Limits CVE-2025-15284	8 Jun 202613:54	–	ibm
IBM Security Bulletins	Security Bulletin: Data Synchronization App for IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	14 Jul 202612:55	–	ibm
IBM Security Bulletins	Security Bulletin: There is a vulnerability in path-to-regexp-0.1.12.tgz used by IBM Maximo Manage application in IBM Maximo Application Suite (CVE-2026-4867)	4 May 202614:05	–	ibm
IBM Security Bulletins	Security Bulletin: Platform Navigator and Automation Assets in IBM Cloud Pak for Integration are vulnerable to vulnerability in qs	29 Jun 202613:43	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in path-to-regexp bundled with IBM Fusion, IBM Fusion HCI, and IBM Fusion Data Cataloging	13 Jul 202621:49	–	ibm

Source	Link
osv	www.osv.dev/vulnerability/CVE-2026-26960
osv	www.osv.dev/vulnerability/ghsa-5359-pvf2-pw78
github	www.github.com/pillarjs/path-to-regexp/releases/tag/v.0.1.13
github	www.github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-CB77162.json
osv	www.osv.dev/vulnerability/UBUNTU-CVE-2026-4867
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-29786
cna	www.cna.openjsf.org/security-advisories.html
osv	www.osv.dev/vulnerability/CVE-2026-4867
osv	www.osv.dev/vulnerability/ghsa-r4q5-vmmm-2653
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-4867

24 Jun 2026 00:00Current

5.9Medium risk

Vulners AI Score5.9

CVSS 3.17.5

CVSS 46.3

EPSS0.00496

SSVC