# node-path-to-regexp security updates

Patch Radar has 11 security fixes for node-path-to-regexp, closing 4 CVEs. The newest is DEBIAN-CVE-2026-4926 (8.4.0-1), released March 26, 2026.

- Web page: https://patchblox.com/security/product/linux/node-path-to-regexp
- Platform: Linux
- Supported: yes

## Security fixes, newest first

| Fix | Released | Fixed in | Priority | CVEs | Exploited |
|---|---|---|---|---:|---:|
| [DEBIAN-CVE-2026-4926](https://patchblox.com/security/data/fix/linux/debian-cve-2026-4926.md) | Mar 26, 2026 | Debian 14 8.4.0-1 | High | 1 | 0 |
| [DEBIAN-CVE-2026-4923](https://patchblox.com/security/data/fix/linux/debian-cve-2026-4923.md) | Mar 26, 2026 | Debian 14 8.4.0-1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-4867](https://patchblox.com/security/data/fix/linux/debian-cve-2026-4867.md) | Mar 26, 2026 | Debian 12.15 (bookworm) 1.0.1-1 | High | 1 | 0 |
| [DEBIAN-CVE-2026-4867](https://patchblox.com/security/data/fix/linux/debian-cve-2026-4867.md) | Mar 26, 2026 | Debian 13.5 (trixie) 1.0.1-1 | High | 1 | 0 |
| [DEBIAN-CVE-2026-4867](https://patchblox.com/security/data/fix/linux/debian-cve-2026-4867.md) | Mar 26, 2026 | Debian 14 1.0.1-1 | High | 1 | 0 |
| [DEBIAN-CVE-2024-45296](https://patchblox.com/security/data/fix/linux/debian-cve-2024-45296.md) | Sep 9, 2024 | Debian 13.5 (trixie) 6.3.0-1 | High | 1 | 0 |
| [DEBIAN-CVE-2024-45296](https://patchblox.com/security/data/fix/linux/debian-cve-2024-45296.md) | Sep 9, 2024 | Debian 14 6.3.0-1 | High | 1 | 0 |
| [node-path-to-regexp 1.0.1-1ubuntu0.18.04.1~esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-node-path-to-regexp-1.0.1-1ubuntu0.18.04.1-esm1.md) | Sep 9, 2024 | Ubuntu 18.04.6 LTS (bionic) 1.0.1-1ubuntu0.18.04.1~esm1 | High | 1 | 0 |
| [node-path-to-regexp 6.1.0-2ubuntu0.1~esm1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-node-path-to-regexp-6.1.0-2ubuntu0.1-esm1.md) | Sep 9, 2024 | Ubuntu 20.04 LTS (focal) 6.1.0-2ubuntu0.1~esm1 | High | 1 | 0 |
| [node-path-to-regexp 6.2.0-2ubuntu0.1~esm1](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-node-path-to-regexp-6.2.0-2ubuntu0.1-esm1.md) | Sep 9, 2024 | Ubuntu 22.04.1 LTS (jammy) 6.2.0-2ubuntu0.1~esm1 | High | 1 | 0 |
| [node-path-to-regexp 6.2.1-1ubuntu0.1~esm1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-node-path-to-regexp-6.2.1-1ubuntu0.1-esm1.md) | Sep 9, 2024 | Ubuntu 24.04.5 LTS (noble) 6.2.1-1ubuntu0.1~esm1 | High | 1 | 0 |

---

Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo