Is path-to-regexp 1.9 vulnerable?

npm · 1 release from 1.9.0 to 1.9.0 · latest path-to-regexp is 9.0.0 · checked 1 Nov 2026

No known advisories in the last release

No. No path-to-regexp 1.9.x release has a known security advisory.

Which of your client projects are still on path-to-regexp 1.9?

NPMscan reads the lockfiles in every GitHub repo you pick, finds the exact path-to-regexp version each one installs, and checks it against these advisories. Each finding comes with the command that fixes it.

Scan a project free, no signup Or connect GitHub to scan every repo

Other path-to-regexp versions

path-to-regexp 2.2
path-to-regexp 2.1
path-to-regexp 2.0
path-to-regexp 1.8
path-to-regexp 1.7
path-to-regexp 1.6
path-to-regexp 9.0
path-to-regexp 8.4
path-to-regexp 8.3
path-to-regexp 8.2
path-to-regexp 8.1
path-to-regexp 8.0
All path-to-regexp advisories

Advisory data from OSV.dev (opens OSV.dev in a new tab), which includes the GitHub Advisory Database. Release list from the npm registry. Refreshed daily.

Is path-to-regexp 1.9 vulnerable?

No known advisories in the last release

Is your project affected?

Which of your client projects are still on path-to-regexp 1.9?

Other path-to-regexp versions