Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
path-to-regexp could run malicious code
published 23 days ago
Summary
The path-to-regexp library used in your applications could be manipulated to execute unintended code, potentially compromising your system. This risk is fixed in version 0.1.10-tuxcare.2, so update the library to that version as soon as possible.
What to do
- Update blakeembrey path-to-regexp to version 0.1.10-tuxcare.2.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:npm | blakeembrey | path-to-regexp |
< 0.1.10-tuxcare.2 Fix: upgrade to 0.1.10-tuxcare.2
|
Original advisory text
TuxCare security update for path-to-regexp (1 CVE)
TuxCare rebuilt path-to-regexp to address 1 CVE. Fixed in 0.1.10-tuxcare.2.
Timeline
Published12 Oct 2026
Updated13 Oct 2026
First seen13 Oct 2026
Sources
CLSA-2026-1791833994 · OSV
Track software like this
Free during beta