mime Regular Expression Denial of Service when MIME lookup performed on untrusted user input

Description

Affected versions of mime are vulnerable to regular expression denial of service when a mime lookup is performed on untrusted user input.

Recommendation

Update the mime package to the latest compatible version. Followings are version details:

• Affected version(s): **>= 2.0.0, < 2.0.3

  < 1.4.1**

• Patched version(s): **2.0.3

  1.4.1**

References

• GHSA-wrvr-8mpx-r7pp
• CVE-2017-16138
• CWE-400
• CAPEC-310
• OWASP 2021-A6