Sourced from path-to-regexp's releases.
Fix backtracking (again)
Fixed
- Improved backtracking protection for 0.1.x, will break some previously valid paths (see previous advisory: https://github.com/pillarjs/path-to-regexp/security/advisories/GHSA-9wv6-86v2-598j)
https://github.com/pillarjs/path-to-regexp/compare/v0.1.11...v0.1.12
Error on bad input
Changed
- Add error on bad input values 8f09549
https://github.com/pillarjs/path-to-regexp/compare/v0.1.10...v0.1.11
640e694
0.1.12f01c26a
Merge commit from fork0c71192
0.1.118f09549
Add error on bad input valuesSourced from express's releases.
4.21.2
What's Changed
- Add funding field (v4) by
@bjohansebas
in expressjs/express#6065- deps: path-to-regexp@0.1.11 by
@blakeembrey
in expressjs/express#5956- deps: bump path-to-regexp@0.1.12 by
@jonchurch
in expressjs/express#6209- Release: 4.21.2 by
@UlisesGascon
in expressjs/express#6094Full Changelog: https://github.com/expressjs/express/compare/4.21.1...4.21.2
Sourced from express's changelog.
4.21.2 / 2024-11-06
- deps: path-to-regexp@0.1.12
- Fix backtracking protection
- deps: path-to-regexp@0.1.11
- Throws an error on invalid path values
This version was pushed to npm by jonchurch, a new releaser for express since your current version.
Sourced from undici's releases.
v5.28.5
⚠️ Security Release ⚠️
Fixes CVE CVE-2025-22150 https://github.com/nodejs/undici/security/advisories/GHSA-c76h-2ccp-4975 (embargoed until 22-01-2025).
Full Changelog: https://github.com/nodejs/undici/compare/v5.28.4...v5.28.5
6139ed2
Bumped v5.28.5711e207
Backport of c2d78cd