~ / search / GHSA-mpcf-4gmh-23w8

GHSA-mpcf-4gmh-23w8

Regular Expression Denial of Service in forwarded

Source: GitHub Advisory Database (reviewed) High CVE-2017-16118

Packages

EcosystemPackageAffectedFixed in
npm forwarded < 0.1.2 0.1.2

Details

As written in the advisory (Markdown source, shown as plain text).

Affected versions of `forwarded` are vulnerable to regular expression denial of service when parsing specially crafted user input. ## Recommendation Update to version 0.1.2 or later

References

External links from the advisory. They lead to third-party sites.