CVE-2017-16136
1 advisory.
npm/method-override CVE-2017-16136: high 7.5
method-override ReDoS when untrusted user input passed into X-HTTP-Method-Override header
Action: Upgrade method-override to 2.3.10 or later.
npm i method-override@2.3.10Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.0.2 | 2.3.10 | - |
| 2.0.0 | 2.3.10 | - |
Fixed versions
| 2.3.10 |
Sources
- osv: GHSA-qx2f-477c-35rq
- https://nvd.nist.gov/vuln/detail/CVE-2017-16136
- https://github.com/expressjs/method-override/commit/4c58835a61fdf7a8e070d6f8ecd5379a961d0987
- https://github.com/expressjs/method-override
- https://www.npmjs.com/advisories/538
CVE-2017-16136 · published · modified · JSON