Dependabot have issued high severity warning for path-to-regex >= 4.0.0, < 6.3.0. With patch available in 6.3.0. https://github.com/advisories/GHSA-9wv6-86v2-598j