CVE-2017-20160
1 advisory.
npm/express-param CVE-2017-20160: critical 9.8
express-param vulnerable to Improper Handling of Extra Parameters
Action: Upgrade express-param to 1.0.0 or later.
npm i express-param@1.0.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.0.0 | - |
Fixed versions
| 1.0.0 |
Sources
- osv: GHSA-fr54-72wr-cqvq
- https://nvd.nist.gov/vuln/detail/CVE-2017-20160
- https://github.com/flitto/express-param/pull/19
- https://github.com/flitto/express-param/commit/db94f7391ad0a16dcfcba8b9be1af385b25c42db
- https://github.com/flitto/express-param
- https://github.com/flitto/express-param/releases/tag/1.0.0
- https://vuldb.com/?ctiid.217149
- https://vuldb.com/?id.217149
CVE-2017-20160 · published · modified · JSON