High severity vulnerabilities / serve-handler / path-to-regexp path-to-regexp-2.2.1.tgz #212

Hello Team,

Mend Bolt tool is showing vulnerability in package "path-to-regexp-2.2.1.tgz" with [CVE-2024-45296]

Vulnerability is raised from the [email protected] module which is used as a transitive dependency. The recommended version of this is 8.1.0

Running npm list path-to-regexp returns the following:

└─┬ [email protected]
└─┬ [email protected]
└── [email protected]

Could you please upgrade the path-to-regexp transitive dependency to 8.1.0 to fix it at asap.

Regards,
Sridevi G