Vendor
Pillarjs
9 known vulnerabilities in products by Pillarjs, 0 of them actively exploited (CISA KEV).
Key figures
9
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-4926 | path-to-regexp vulnerable to Denial of Service via sequential optional groups | 7.5 | |
| High | CVE-2024-45296 | path-to-regexp outputs backtracking regular expressions | 7.5 | |
| High | CVE-2024-52798 | path-to-regexp Unpatched `path-to-regexp` ReDoS in 0.1.x | — | |
| High | CVE-2026-4867 | path-to-regexp vulnerable to Regular Expression Denial of Service via multiple route parameters | 7.5 | |
| High | CVE-2026-8161 | multiparty vulnerable to Denial of Service via Prototype Pollution leading to Uncaught Exception | 7.5 | |
| High | CVE-2026-8159 | multiparty vulnerable to ReDoS via filename parsing | 7.5 | |
| High | CVE-2026-8162 | multiparty vulnerable to Denial of Service via Uncaught Exception in filename* parameter parsing | 7.5 | |
| Medium | CVE-2026-4923 | path-to-regexp vulnerable to Regular Expression Denial of Service via multiple wildcards | 5.9 | |
| Medium | CVE-2024-43799 | send vulnerable to template injection that can lead to XSS | 5.0 |
Products
| Path-to-regexp | 5 | 0 |
| Multiparty | 3 | 0 |