Skip to content

blog: March 2026 security releases#2226

Merged
bjohansebas merged 2 commits intogh-pagesfrom
blog/march-2026-security-releases
Mar 30, 2026
Merged

blog: March 2026 security releases#2226
bjohansebas merged 2 commits intogh-pagesfrom
blog/march-2026-security-releases

Conversation

@UlisesGascon
Copy link
Copy Markdown
Member

@UlisesGascon UlisesGascon commented Mar 30, 2026

Security releases blog post for March 2026.

👉 PREVIEW LINK

CVEs covered:

  • CVE-2026-4867: path-to-regexp - ReDoS via multiple route parameters
  • CVE-2026-4926: path-to-regexp - DoS via sequential optional groups
  • CVE-2026-4923: path-to-regexp - ReDoS via multiple wildcards

@netlify
Copy link
Copy Markdown

netlify Bot commented Mar 30, 2026

Deploy Preview for expressjscom-preview ready!

Name Link
🔨 Latest commit 0d735c6
🔍 Latest deploy log https://app.netlify.com/projects/expressjscom-preview/deploys/69ca890d16748600085606ec
😎 Deploy Preview https://deploy-preview-2226--expressjscom-preview.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.
Lighthouse
Lighthouse
1 paths audited
Performance: 99 (🟢 up 2 from production)
Accessibility: 87 (no change from production)
Best Practices: 100 (no change from production)
SEO: 94 (no change from production)
PWA: -
View the detailed breakdown and full score reports

To edit notification comments on pull requests, go to your Netlify project configuration.

@UlisesGascon UlisesGascon force-pushed the blog/march-2026-security-releases branch from a2739d5 to c6a7d02 Compare March 30, 2026 11:12
@UlisesGascon UlisesGascon marked this pull request as ready for review March 30, 2026 11:21
@UlisesGascon UlisesGascon requested a review from a team as a code owner March 30, 2026 11:21
Comment thread _posts/2026-03-30-security-releases.md
Copy link
Copy Markdown
Member

@bjohansebas bjohansebas left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGMT!

@bjohansebas bjohansebas merged commit 2d4df3f into gh-pages Mar 30, 2026
15 checks passed
@bjohansebas bjohansebas deleted the blog/march-2026-security-releases branch March 30, 2026 19:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants