EUVD-2024-3506Published
path-to-regexp Unpatched `path-to-regexp` ReDoS in 0.1.x
Related advisories and sources
Publishers link these advisories through the identifiers shown below. A shared identifier or date alone does not tell you whether your software is affected or whether the advisories describe the same cause.
CVE-2024-52798 · CVE overview and exploitation status
cve-program · CVE-2024-52798
- https://github.com/pillarjs/path-to-regexp/security/advisories/GHSA-rhx6-c78j-4q9w
- https://github.com/pillarjs/path-to-regexp/commit/f01c26a013b1889f0c217c643964513acf17f6a4
euvd · EUVD-2024-3506
- https://github.com/pillarjs/path-to-regexp/security/advisories/GHSA-rhx6-c78j-4q9w
- https://github.com/pillarjs/path-to-regexp/commit/f01c26a013b1889f0c217c643964513acf17f6a4
nvd · CVE-2024-52798
- https://github.com/pillarjs/path-to-regexp/commit/f01c26a013b1889f0c217c643964513acf17f6a4
- https://github.com/pillarjs/path-to-regexp/security/advisories/GHSA-rhx6-c78j-4q9w
- https://security.netapp.com/advisory/ntap-20250124-0002/
osv · GHSA-rhx6-c78j-4q9w
- https://github.com/pillarjs/path-to-regexp/security/advisories/GHSA-rhx6-c78j-4q9w
- https://nvd.nist.gov/vuln/detail/CVE-2024-52798
- https://github.com/pillarjs/path-to-regexp/commit/f01c26a013b1889f0c217c643964513acf17f6a4
- https://blakeembrey.com/posts/2024-09-web-redos
- https://github.com/pillarjs/path-to-regexp
- https://security.netapp.com/advisory/ntap-20250124-0002
Related changes
Linked by CVE identifierNo related changes are available here.