CVE-2024-45813: Delvedor Find-My-Way

Medium severity, CVSS 5.3. EPSS: 0.7% chance of exploitation in the next 30 days.

find-my-way is a fast, open source HTTP router, internally using a Radix Tree (aka compact Prefix Tree), supports route params, wildcards, and it's framework independent. A bad regular expression is generated any time one has two parameters within a single segment, when adding a `-` at the end, like `/:a-:b-`. This may cause a denial of service in some instances. Users are advised to update to find-my-way v8.2.2 or v9.0.1. or subsequent versions. There are no known workarounds for this issue.

Affected products

• Delvedor Find-My-Way: before 8.2.2 (fixed in 8.2.2); version 9.0.0 only

Published 2024-09-18. Last modified 2026-06-17.