GHSA-27v5-c462-wpq7
Medium · 5.9CVSS
5.9
EPSS
—
Published
Mar 27, 2026
CISA due date
—
The record
path-to-regexp vulnerable to Regular Expression Denial of Service via multiple wildcards
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| npm | path-to-regexp | 8.0.0 | 8.4.0 |
| Chainguard | code-server | 0 | 4.112.0-r2 |
| Chainguard | gemini-cli | 0 | 0.35.3-r0 |
| Chainguard | opensearch-dashboards-2 | 0 | 2.19.5-r6 |
| Chainguard | opensearch-dashboards-2-fips | 0 | 2.19.5-r5 |
| Chainguard | redisinsight | 0 | 3.2.0-r4 |
| Chainguard | thingsboard-tb-js-executor | 0 | 4.3.1.1-r0 |
| Chainguard | thingsboard-tb-web-ui | 0 | 4.3.1.1-r0 |
| Chainguard | tileserver-gl | 0 | 5.5.0-r12 |
| Chainguard | tileserver-gl-fips | 0 | 5.5.0-r12 |
| Chainguard | wazuh-dashboard | 0 | 4.14.4-r1 |
| Wolfi | code-server | 0 | 4.112.0-r2 |
| Wolfi | opensearch-dashboards-2 | 0 | 2.19.5-r6 |
| Wolfi | thingsboard-tb-js-executor | 0 | 4.3.1.1-r0 |
| Wolfi | thingsboard-tb-web-ui | 0 | 4.3.1.1-r0 |
| Wolfi | tileserver-gl | 0 | 5.5.0-r12 |
Related vulnerabilities
- CVE-2026-4923 Impact: When using multiple wildcards, combined with at least one parameter, a regular… Same vulnerability
- GHSA-j3q9-mxjg-w52f path-to-regexp vulnerable to Denial of Service via sequential optional groups Also affects path-to-regexp
- GHSA-37ch-88jc-xwx2 path-to-regexp vulnerable to Regular Expression Denial of Service via multiple route… Also affects path-to-regexp
- CVE-2026-4926 Impact: A bad regular expression is generated any time you have multiple sequential… Also affects path-to-regexp
- CVE-2026-4867 Impact: A bad regular expression is generated any time you have three or more parameters… Also affects path-to-regexp
- CVE-2024-52798 path-to-regexp turns path strings into a regular expressions. Also affects path-to-regexp
- CVE-2024-45296 path-to-regexp turns path strings into a regular expressions. Also affects path-to-regexp
- GHSA-r5fr-rjxr-66jc lodash vulnerable to Code Injection via `_.template` imports key names Also affects code-server