https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 21:11:47 +0000 https://vulnerability.circl.lu/vuln/cve-2026-4923 <p><strong>Affected:</strong> path-to-regexp</p> <p>Impact:</p> <p>When using multiple wildcards, combined with at least one parameter, a regular expression can be generated that is vulnerable to ReDoS. This backtracking vulnerability requires the second wildcard to be somewhere other than the end of the path.</p> <p>Unsafe examples:</p> <p>/*foo-*bar-:baz /*a-:b-*c-:d /x/*a-:b/*c/y</p> <p>Safe examples:</p> <p>/*foo-:bar /*foo-:bar-*baz</p> <p>Patches:</p> <p>Upgrade to version 8.4.0.</p> <p>Workarounds:</p> <p>If you are using multiple wildcard parameters, you can check the regex output with a tool such as https://makenowjust-labs.github.io/recheck/playground/ to confirm whether a path is vulnerable.</p> <p><strong>Affected:</strong> path-to-regexp</p> <p>Impact:</p> <p>When using multiple wildcards, combined with at least one parameter, a regular expression can be generated that is vulnerable to ReDoS. This backtracking vulnerability requires the second wildcard to be somewhere other than the end of the path.</p> <p>Unsafe examples:</p> <p>/*foo-*bar-:baz /*a-:b-*c-:d /x/*a-:b/*c/y</p> <p>Safe examples:</p> <p>/*foo-:bar /*foo-:bar-*baz</p> <p>Patches:</p> <p>Upgrade to version 8.4.0.</p> <p>Workarounds:</p> <p>If you are using multiple wildcard parameters, you can check the regex output with a tool such as https://makenowjust-labs.github.io/recheck/playground/ to confirm whether a path is vulnerable.</p> https://vulnerability.circl.lu/vuln/cve-2026-4923