v4.22.3
expressjs/expressv4.22.3Sep 14, 2026by UlisesGascon
Upgrading?
AI Summary
This maintenance release updates the path-to-regexp dependency to address a security vulnerability and introduces support for conditional revalidation of query requests. It also updates the qs dependency and enhances the CI pipeline for publishing workflows.
Key Highlights
- Fixes CVE-2026-4867 by updating path-to-regexp to 0.1.13
- New feature: Conditional revalidation support for query requests
- Updates qs dependency to version 6.16.0
- Improves CI with npm staged publication support
New Features
- Allow conditional revalidation for QUERY requests (v4)
Full Release Notes
## What's Changed * Update path-to-regexp to 0.1.13 to fix CVE-2026-4867 by @baryman in https://github.com/expressjs/express/pull/7135 * feat: allow conditional revalidation for QUERY requests (v4) by @Cherry in https://github.com/expressjs/express/pull/7377 * deps: qs@~6.16.0 by @lazerg in https://github.com/expressjs/express/pull/7440 * ci: add npm staged publication with dist-tag support by @UlisesGascon in https://github.com/expressjs/express/pull/7465 * 4.22.3 by @UlisesGascon in https://github.com/expressjs/express/pull/7466 ## New Contributors * @baryman made their first contribution in https://github.com/expressjs/express/pull/7135 * @lazerg made their first contribution in https://github.com/expressjs/express/pull/7440 **Full Changelog**: https://github.com/expressjs/express/compare/v4.22.2...v4.22.3
Related Repositories
The agent harness performance optimization system. Skills, instincts, memory, security, and research-first development for Claude Code, Codex, Opencode, Cursor and beyond.
The library for web and native user interfaces.
Node.js JavaScript runtime ✨🐢🚀✨
Open-source platform for extracting structured data from documents using AI.
Agent skills that give coding agents taste: art direction, reference images and a browser check instead of generic AI pages