{"action":"Upgrade path-to-regexp to 0.1.12 or later.","affected":[{"fixed":"0.1.12","introduced":"0"}],"component":"path-to-regexp","cve_ids":["CVE-2024-52798"],"ecosystem":"npm","epss":0.00787,"exploited":false,"fixed_versions":["0.1.12"],"ghsa_id":"GHSA-rhx6-c78j-4q9w","id":"tcs_01M5KG977JMM8QVGP8WY84N1K4","modified_at":"2026-09-10T03:50:56.223604407Z","published_at":"2024-12-05T22:40:47Z","references":["https://osv.dev/vulnerability/GHSA-rhx6-c78j-4q9w","https://github.com/pillarjs/path-to-regexp/security/advisories/GHSA-rhx6-c78j-4q9w","https://nvd.nist.gov/vuln/detail/CVE-2024-52798","https://github.com/pillarjs/path-to-regexp/commit/f01c26a013b1889f0c217c643964513acf17f6a4","https://blakeembrey.com/posts/2024-09-web-redos","https://github.com/pillarjs/path-to-regexp","https://security.netapp.com/advisory/ntap-20250124-0002"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-rhx6-c78j-4q9w","url":"https://osv.dev/vulnerability/GHSA-rhx6-c78j-4q9w"}],"summary":"path-to-regexp contains a ReDoS"}