{"action":"Upgrade mime to 1.4.1 or later.","affected":[{"fixed":"2.0.3","introduced":"2.0.0"},{"fixed":"1.4.1","introduced":"0"}],"component":"mime","cve_ids":["CVE-2017-16138"],"ecosystem":"npm","epss":0.02119,"exploited":false,"fixed_versions":["2.0.3","1.4.1"],"ghsa_id":"GHSA-wrvr-8mpx-r7pp","id":"tcs_01M5KGFY0V5T7AAHP1F2NKJ3H8","modified_at":"2023-11-08T03:59:07.102650Z","published_at":"2018-07-20T16:20:52Z","references":["https://osv.dev/vulnerability/GHSA-wrvr-8mpx-r7pp","https://nvd.nist.gov/vuln/detail/CVE-2017-16138","https://github.com/broofa/node-mime/issues/167","https://github.com/broofa/mime/commit/1df903fdeb9ae7eaa048795b8d580ce2c98f40b0","https://github.com/broofa/mime/commit/855d0c4b8b22e4a80b9401a81f2872058eae274d","https://github.com/broofa/mime"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-wrvr-8mpx-r7pp","url":"https://osv.dev/vulnerability/GHSA-wrvr-8mpx-r7pp"}],"summary":"mime Regular Expression Denial of Service when MIME lookup performed on untrusted user input"}