CVE-2017-16138
1 advisory.
npm/mime CVE-2017-16138: high 7.5
mime Regular Expression Denial of Service when MIME lookup performed on untrusted user input
Action: Upgrade mime to 1.4.1 or later.
npm i mime@2.0.3npm i mime@1.4.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.0.0 | 2.0.3 | - |
| 0 | 1.4.1 | - |
Fixed versions
| 2.0.3 | 1.4.1 |
Sources
- osv: GHSA-wrvr-8mpx-r7pp
- https://nvd.nist.gov/vuln/detail/CVE-2017-16138
- https://github.com/broofa/node-mime/issues/167
- https://github.com/broofa/mime/commit/1df903fdeb9ae7eaa048795b8d580ce2c98f40b0
- https://github.com/broofa/mime/commit/855d0c4b8b22e4a80b9401a81f2872058eae274d
- https://github.com/broofa/mime
CVE-2017-16138 · published · modified · JSON