### ImpactA bad regular expression is generated any time you have two parameters within a single segment, when adding a `-` at the end, like `/:a-:b-`.### PatchesUpdate to find-my-way v8.2.2 or v9.0.1. or subsequent versions.### WorkaroundsNo known workarounds.### References- [CVE-2024-45296](https://github.com/advisories/GHSA-9wv6-86v2-598j)- [Detailed blog post about `path-to-regexp` vulnerability](https://blakeembrey.com/posts/2024-09-web-redos/)
Fix available through Seal Security. No upgrade required, protect your application instantly.
Fix without upgrading