Hi, #1132020 speaks about 3 CVE for node-path-to-regexp, but metadata are wrong: - CVE-2026-4867: affects versions < 0.1.13, we have all >6 - CVE-2026-4923 and CVE-2026-4926 affect only testing/unstable (vulnerable versions are [8.0.0 .. 8.3.0] and stable has 6.3.0)
Regards, Xavier
