CVE-2026-47219

A flaw was found in find-my-way, a routing module for Node.js. A remote attacker could exploit this vulnerability when find-my-way is used with Node's HTTP/2 server. By sending specially crafted HTTP/2 method values, an attacker can cause the application to crash, leading to a Denial of Service...

CLSA-2026-1785291246 TuxCare security update for find-my-way (2 CVEs)

TuxCare rebuilt find-my-way to address 2 CVEs. Fixed in 9.6.0-tuxcare.1...

CVE-2026-47219

find-my-way is a framework-independent HTTP router that internally uses a Radix Tree and supports route parameters and wildcards. Versions prior to 9.7.0 are vulnerable to remotely triggerable DoS in find-my-way when it is used with Node's HTTP/2 server. The lookup function passes req.method into...

CVE-2026-47219 find-my-way is Vulnerable to DDoS with HTTP2

find-my-way is a framework-independent HTTP router that internally uses a Radix Tree and supports route parameters and wildcards. Versions prior to 9.7.0 are vulnerable to remotely triggerable DoS in find-my-way when it is used with Node's HTTP/2 server. The lookup function passes req.method into...

CVE-2026-47219 find-my-way is Vulnerable to DDoS with HTTP2

find-my-way is a framework-independent HTTP router that internally uses a Radix Tree and supports route parameters and wildcards. Versions prior to 9.7.0 are vulnerable to remotely triggerable DoS in find-my-way when it is used with Node's HTTP/2 server. The lookup function passes req.method into...

EUVD-2026-50084

find-my-way is a framework-independent HTTP router that internally uses a Radix Tree and supports route parameters and wildcards. Versions prior to 9.7.0 are vulnerable to remotely triggerable DoS in find-my-way when it is used with Node's HTTP/2 server. The lookup function passes req.method into...

CVE-2026-47219

find-my-way is a framework-independent HTTP router that internally uses a Radix Tree and supports route parameters and wildcards. Versions prior to 9.7.0 are vulnerable to remotely triggerable DoS in find-my-way when it is used with Node's HTTP/2 server. The lookup function passes req.method into...

CVE-2026-47219

CVE-2026-47219 : The vulnerability affects the find-my-way HTTP router. Versions before 9.7.0 are susceptible to remotely triggerable DoS when used with Node's HTTP/2 server. The issue arises because lookup() passes req.method to find(), and find() indexes this.trees[method]. Since this.trees is ...

@depup/prisma (7.9.0-depup.0), @depup/prisma__dev (0.24.14-depup.40) +22 more potentially affected by CVE-2026-47219 via find-my-way (>=9.3.0, <=9.6.0)

find-my-way NPM version =9.3.0, =1.0.3-alpha.0b30e6d.0, =11.1.11, =7.8.0-lossless.12, =0.1.4, =0.2.2, =1.10.0, =11.1.0, =0.7.0, =0.8.0 and more Source cves: CVE-2026-47219 Source advisory: SNYK:JS-FINDMYWAY-18313040...

NPM: find-my-way: DDoS with HTTP2

NPM: find-my-way: DDoS with HTTP2 vulnerability discovered by ? in WordPress Npm find-my-way versions = 9.6.0...

@depup/prisma (7.9.0-depup.0), @depup/prisma__dev (0.24.14-depup.40) +22 more potentially affected by CVE-2026-47219 via find-my-way (>=9.3.0, <=9.6.0)

find-my-way NPM version =9.3.0, =1.0.3-alpha.0b30e6d.0, =11.1.11, =7.8.0-lossless.12, =0.1.4, =0.2.2, =1.10.0, =11.1.0, =0.7.0, =0.8.0 and more Source cves: CVE-2026-47219 Source advisory: OSV:GHSA-C96F-X56V-GQ3H...

find-my-way: DDoS with HTTP2

Impact Remotely triggerable DoS in find-my-way when it is used with Node's HTTP/2 server. The short version is that lookup passes req.method into find, and find indexes this.treesmethod. Since this.trees is a normal object, HTTP/2 method values like constructor, toString, or proto can resolve...

GHSA-C96F-X56V-GQ3H find-my-way: DDoS with HTTP2

Impact Remotely triggerable DoS in find-my-way when it is used with Node's HTTP/2 server. The short version is that lookup passes req.method into find, and find indexes this.treesmethod. Since this.trees is a normal object, HTTP/2 method values like constructor, toString, or proto can resolve...

PT-2026-64211

Name of the Vulnerable Software and Affected Versions find-my-way versions prior to 9.7.0 Description A remotely triggerable Denial of Service DoS exists when the software is used with Node's HTTP/2 server. The lookup function passes the req.method variable into the find function, which then...

EUVD-2020-1460

Malware in sbrugna...

The vulnerability of the HTTP router Find my Way, related to the use of a regular expression c with inefficient computational complexity, allows a hacker to trigger a Denial-of-Service attack (ReDos).

The vulnerability of the HTTP router Find my Way is related to the use of a regular expression with inefficient computational complexity. Exploiting this vulnerability can allow a remote attacker to trigger a denial-of-service attack ReDos...

CVE-2024-45813

A regular expression denial of service ReDoS flaw was found in find-my-way. A bad regular expression is generated any time one has two parameters within a single segment, when adding a - at the end, such as /:a-:b-. This issue may cause a denial of service in some instances. Mitigation Mitigation...

CVE-2024-45813

CVE-2024-45813 affects the find-my-way HTTP router. A bad regular expression is generated when two parameters exist within a single segment, notably with a trailing dash (e.g., ":/a-:b-"). This can lead to a Denial of Service in some cases. Affected versions require upgrade to find-my-way v8.2.2 ...

CVE-2024-45813 ReDoS vulnerability in multiparametric routes in find-my-way

find-my-way is a fast, open source HTTP router, internally using a Radix Tree aka compact Prefix Tree, supports route params, wildcards, and it's framework independent. A bad regular expression is generated any time one has two parameters within a single segment, when adding a - at the end, like...

CVE-2024-45813 ReDoS vulnerability in multiparametric routes in find-my-way

find-my-way is a fast, open source HTTP router, internally using a Radix Tree aka compact Prefix Tree, supports route params, wildcards, and it's framework independent. A bad regular expression is generated any time one has two parameters within a single segment, when adding a - at the end, like...