pathway vulnerabilities

CVEs whose affected-version data names the pathway package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-59094High· 7.5PoC

4mo ago

Pathway - Unauthenticated Denial of Service via Exponential Glob Pattern Matching in Document Store

Pathway through 0.31.1, fixed in commit d09722e, document store applies a caller-supplied glob pattern to indexed document paths using a hand-written recursive matcher that branches two ways on each ** token without memoization, giving e…

▾ Midnightpathwaycom · pathwayEPSS 0.79%via CVEORG