TI-2024-35311 CVE-2024-52798 · GHSA-rhx6-c78j-4q9w
path-to-regexp Unpatched `path-to-regexp` ReDoS in 0.1.x
Priority MEDIUM 41
path-to-regexp turns path strings into a regular expressions.
Red Hat OpenShift Data Foundation 4.17.3 Bug Fix Update
Released 2025-01-28 · Red Hat rating Important · View on Red Hat →
path-to-regexp turns path strings into a regular expressions.
An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing.