You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
path-to-regexp 0.2.0 - 7.2.0
Severity: high
path-to-regexp outputs backtracking regular expressions - https://github.com/advisories/GHSA-9wv6-86v2-598j
fix available via `npm audit fix --force`
Will install serve@6.5.8, which is a breaking change
node_modules/serve-handler/node_modules/path-to-regexp
serve-handler *
Depends on vulnerable versions of path-to-regexp
node_modules/serve-handler
serve >=7.0.0
Depends on vulnerable versions of serve-handler
node_modules/serve
Issue
Dependabot reports a high severity vulnerability path-to-regexp outputs backtracking regular expressions in this repo concerning CVE-2024-45296.
This is also reported by
npm audit
:The vulnerability is pulled in by
cypress-example-kitchensink/package.json
Line 64 in 31bf667
serve-handler
/path-to-regexp
vercel/serve#811, however at this time there is no resolution available.The text was updated successfully, but these errors were encountered: