pillarjs records
8 published records for vendor pillarjs.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 100%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-1333 Inefficient Regular Expression Complexity5
- CWE-248 Uncaught Exception1
- CWE-400 Uncontrolled Resource Consumption1
- CWE-755 Improper Handling of Exceptional Conditions1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
8 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
30Monitor | CVE-2024-45296No exploit | path-to-regexp outputs backtracking regular expressionspillarjs · path-to-regexp · CWE-1333 | High7.5 | — | 0.9% | Sep 9, 2024 |
30Monitor | CVE-2026-4926No exploit | path-to-regexp vulnerable to Denial of Service via sequential optional groupspillarjs · path-to-regexp · CWE-400 | High7.5 | — | 0.9% | Mar 26, 2026 |
30Monitor | CVE-2024-52798No exploit | path-to-regexp Unpatched `path-to-regexp` ReDoS in 0.1.xpillarjs · path-to-regexp · CWE-1333 | High7.7 | — | 0.8% | Dec 5, 2024 |
30Monitor | CVE-2026-4867No exploit | path-to-regexp vulnerable to Regular Expression Denial of Service via multiple route parameterspillarjs · path-to-regexp · CWE-1333 | High7.5 | — | 0.6% | Mar 26, 2026 |
30Monitor | CVE-2026-8159No exploit | multiparty vulnerable to ReDoS via filename parsingpillarjs · multiparty · CWE-1333 | High7.5 | — | 0.6% | May 12, 2026 |
30Monitor | CVE-2026-8162No exploit | multiparty vulnerable to Denial of Service via Uncaught Exception in filename* parameter parsingpillarjs · multiparty · CWE-755 | High7.5 | — | 0.6% | May 12, 2026 |
30Monitor | CVE-2026-8161Proof of concept | multiparty vulnerable to Denial of Service via Prototype Pollution leading to Uncaught Exceptionpillarjs · multiparty · CWE-248 | High7.5 | — | 0.5% | May 12, 2026 |
23Monitor | CVE-2026-4923No exploit | path-to-regexp vulnerable to Regular Expression Denial of Service via multiple wildcardspillarjs · path-to-regexp · CWE-1333 | Medium5.9 | — | 0.4% | Mar 26, 2026 |
- CVE-2024-4529630Monitor
path-to-regexp outputs backtracking regular expressions
HighCVSS 7.5No exploitEPSS 1%pillarjs · path-to-regexpSep 9, 2024
- CVE-2026-492630Monitor
path-to-regexp vulnerable to Denial of Service via sequential optional groups
HighCVSS 7.5No exploitEPSS 1%pillarjs · path-to-regexpMar 26, 2026
- CVE-2024-5279830Monitor
path-to-regexp Unpatched `path-to-regexp` ReDoS in 0.1.x
HighCVSS 7.7No exploitEPSS 1%pillarjs · path-to-regexpDec 5, 2024
- CVE-2026-486730Monitor
path-to-regexp vulnerable to Regular Expression Denial of Service via multiple route parameters
HighCVSS 7.5No exploitEPSS 1%pillarjs · path-to-regexpMar 26, 2026
- CVE-2026-815930Monitor
multiparty vulnerable to ReDoS via filename parsing
HighCVSS 7.5No exploitEPSS 1%pillarjs · multipartyMay 12, 2026
- CVE-2026-816230Monitor
multiparty vulnerable to Denial of Service via Uncaught Exception in filename* parameter parsing
HighCVSS 7.5No exploitEPSS 1%pillarjs · multipartyMay 12, 2026
- CVE-2026-816130Monitor
multiparty vulnerable to Denial of Service via Prototype Pollution leading to Uncaught Exception
HighCVSS 7.5Proof of conceptEPSS 1%pillarjs · multipartyMay 12, 2026
- CVE-2026-492323Monitor
path-to-regexp vulnerable to Regular Expression Denial of Service via multiple wildcards
MediumCVSS 5.9No exploitEPSS 0%pillarjs · path-to-regexpMar 26, 2026