Pillarjs vulnerabilities

Products

• Path-to-regexp 5
• Hbs 3
• Multiparty 3

Newest

• hbs hbs vulnerable to Denial of Service via unhandled exception in async helper output escaping CVE-2026-87123 5.9 MediumSeptember 11, 2026
• hbs hbs vulnerable to XSS via registerAsyncHelper output-escaping bypass CVE-2026-16231 8.1 HighAugust 25, 2026
• multiparty multiparty vulnerable to Denial of Service via Uncaught Exception in filename* parameter parsing CVE-2026-8162 Fix available 7.5 HighMay 12, 2026
• multiparty multiparty vulnerable to Denial of Service via Prototype Pollution leading to Uncaught Exception CVE-2026-8161 Public exploitFix available 7.5 HighMay 12, 2026
• multiparty multiparty vulnerable to ReDoS via filename parsing CVE-2026-8159 Fix available 7.5 HighMay 12, 2026
• path-to-regexp path-to-regexp vulnerable to Regular Expression Denial of Service via multiple wildcards CVE-2026-4923 Fix available 5.9 MediumMarch 26, 2026
• path-to-regexp, red hat cryostat 4, cryostat 4 on rhel 9 +49 more +51 more path-to-regexp vulnerable to Denial of Service via sequential optional groups CVE-2026-4926 Fix available 7.5 HighMarch 26, 2026
• path-to-regexp path-to-regexp Unpatched `path-to-regexp` ReDoS in 0.1.x CVE-2024-52798 Fix available 7.7 HighDecember 5, 2024
• pillarjs send send vulnerable to template injection that can lead to XSS CVE-2024-43799 Fix available 5.0 MediumSeptember 10, 2024
• path-to-regexp path-to-regexp vulnerable to Regular Expression Denial of Service via multiple route parameters CVE-2026-4867 Fix available 7.5 HighSeptember 9, 2024
• path-to-regexp path-to-regexp outputs backtracking regular expressions CVE-2024-45296 Fix available 7.5 HighSeptember 9, 2024
• hbs project hbs File disclosure in hbs CVE-2021-32822 4.0 MediumAugust 16, 2021