Lucene search
+L

1 matches found

OSV
OSV
added 2026/03/27 8:4 p.m.9 views

GHSA-37CH-88JC-XWX2 path-to-regexp vulnerable to Regular Expression Denial of Service via multiple route parameters

Impact A bad regular expression is generated any time you have three or more parameters within a single segment, separated by something that is not a period .. For example, /:a-:b-:c or /:a-:b-:c-:d. The backtrack protection added in [email protected] only prevents ambiguity for two parameter...

7.5CVSS5.9AI score0.00932EPSS
SaveExploits0References7
Rows per page
Query Builder