# What changed in find-my-way

> 13 changes in find-my-way 9 from its official release notes, upgrade guides and advisories: 1 breaking, 2 security, 1 new APIs and options. Each one cited. Sources checked 2026-10-20. HTML: https://unstale.sh/npm/find-my-way/

To see which of these apply to a repository, run `npx @unstale/cli init` in it.

## find-my-way 9

### Breaking changes

- Duplicate slashes are no longer removed from the querystring, including in compiled lookups. (9.10.0) — [release notes](https://github.com/delvedor/find-my-way/releases/tag/v9.10.0)

### Security

- Parsing of absolute-form request targets is made safer. (9.9.0) — [release notes](https://github.com/delvedor/find-my-way/releases/tag/v9.9.0)
- find-my-way: DDoS with HTTP2 (9.7.0) — [security advisory](https://github.com/advisories/GHSA-C96F-X56V-GQ3H)

### New APIs and options

- A compiler mode for route lookup is available. (9.10.0) — [release notes](https://github.com/delvedor/find-my-way/releases/tag/v9.10.0)

### Performance

- Repeated %25 sanitisation is linear instead of quadratic. (9.10.0) — [release notes](https://github.com/delvedor/find-my-way/releases/tag/v9.10.0)
- Route lookup is faster, with an 8.7% geomean improvement and up to 40% improvement on long static routes. (9.10.0) — [release notes](https://github.com/delvedor/find-my-way/releases/tag/v9.10.0)
- Route registration is linear instead of quadratic. (9.10.0) — [release notes](https://github.com/delvedor/find-my-way/releases/tag/v9.10.0)
- Route lookup is faster, with every benchmark scenario faster and an 18.7% geomean improvement. (9.8.0) — [release notes](https://github.com/delvedor/find-my-way/releases/tag/v9.8.0)

### Fixes and other changes

- Absolute URLs are validated without throwing. (9.10.0) — [release notes](https://github.com/delvedor/find-my-way/releases/tag/v9.10.0)
- Strategy lookups are guarded against inherited Object prototype properties. (9.10.0) — [release notes](https://github.com/delvedor/find-my-way/releases/tag/v9.10.0)
- The regex host lookup cache is now bounded. (9.10.0) — [release notes](https://github.com/delvedor/find-my-way/releases/tag/v9.10.0)
- RegExp values in constraints and meta are now serialized when prettyPrint outputs routes. (9.8.0) — [release notes](https://github.com/delvedor/find-my-way/releases/tag/v9.8.0)
- Static parts between parameters are now kept in the route pattern. (9.8.0) — [release notes](https://github.com/delvedor/find-my-way/releases/tag/v9.8.0)