CVE-2024-45296: path-to-regexp update needed
steuraa opened this issue · 2 comments
steuraa commented
Scope
Improves an existing behavior
Compatibility
- This is a breaking change
Feature description
Hello, currently we can't build our application anymore due to MSW having the path-to-regexp package as a dependency which is causing a CVE warning.
See https://nvd.nist.gov/vuln/detail/CVE-2024-45296.
Is there any change this could be quickly patched?
paulo9mv commented