npm/charset CVE-2017-16098: high 7.5, EPSS 1.63%
Regular Expression Denial of Service in charset
Action: Upgrade charset to 1.0.1 or later.
npm i charset@1.0.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.0.1 | - |
Fixed versions
| 1.0.1 |
Sources
- osv: GHSA-9cp3-fh5x-xfcj
- https://nvd.nist.gov/vuln/detail/CVE-2017-16098
- https://github.com/node-modules/charset/issues/10
- https://github.com/node-modules/charset/pull/11
- https://github.com/node-modules/charset/commit/effda0c48c51b47a47f4cad7db0c51ee7407cc1b
- https://github.com/node-modules/charset
CVE-2017-16098 · published · modified · JSON