VDB
GHSA-j3q9-mxjg-w52f
GHSA-j3q9-mxjg-w52f
PUBLISHED
CVSS 7.5 HIGH
path-to-regexp vulnerable to Denial of Service via sequential optional groups
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| chainguard | tileserver-gl-fips | 0, 0, 0 |
| chainguard | vitess-23 | 0, 0, 0 |
| chainguard | kibana-9.1 | 0, 0, 0 |
| wolfi | saf | 0 |
| wolfi | code-server | 0, 0, 0 |
| chainguard | thingsboard | 0 |
| chainguard | opensearch-dashboards-2-fips | 0, 0, 0 |
| wolfi | tileserver-gl | 0, 0, 0 |
| chainguard | kibana-9.2 | 0, 0, 0 |
| chainguard | langfuse-fips-3 | 0, 0, 0 |
| wolfi | opensearch-dashboards-2 | 0, 0, 0 |
| chainguard | redisinsight | 0, 0, 0 |
| chainguard | langfuse-3 | 0, 0, 0 |
| chainguard | tileserver-gl | 0 |
| chainguard | saf | 0, 0, 0 |
| chainguard | kibana-9.3 | 0, 0, 0 |
| npm | path-to-regexp | 8.0.0 |
| wolfi | thingsboard | 0 |
| chainguard | wazuh-dashboard | 0, 0, 0 |
| chainguard | opensearch-dashboards-2 | 0, 0, 0 |
…and 6 more
Timeline
- Mar 27, 2026 CVE Published
- Apr 30, 2026 Security Advisory