https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 13:42:33 +0000 https://vulnerability.circl.lu/vuln/ghsa-j3q9-mxjg-w52f <p><strong>Affected:</strong> npm: path-to-regexp</p> <p>### Impact</p> <p>A bad regular expression is generated any time you have multiple sequential optional groups (curly brace syntax), such as `{a}{b}{c}:z`. The generated regex grows exponentially with the number of groups, causing denial of service.</p> <p>### Patches</p> <p>Fixed in version 8.4.0.</p> <p>### Workarounds</p> <p>Limit the number of sequential optional groups in route patterns. Avoid passing user-controlled input as route patterns.</p> <p><strong>Affected:</strong> npm: path-to-regexp</p> <p>### Impact</p> <p>A bad regular expression is generated any time you have multiple sequential optional groups (curly brace syntax), such as `{a}{b}{c}:z`. The generated regex grows exponentially with the number of groups, causing denial of service.</p> <p>### Patches</p> <p>Fixed in version 8.4.0.</p> <p>### Workarounds</p> <p>Limit the number of sequential optional groups in route patterns. Avoid passing user-controlled input as route patterns.</p> https://vulnerability.circl.lu/vuln/ghsa-j3q9-mxjg-w52f