Description
Affected versions of content are vulnerable to a regular expression denial of service when parsing malicious Content-Type and Content-Disposition headers.
Recommendation
Update the content package to the latest compatible version. Followings are version details:
- Affected version(s): < 3.0.7
- Patched version(s): 3.0.7
References
Related Issues
- Regular Expression Denial of Service in slug - CVE-2017-16117
- Regular Expression Denial of Service in no-case - CVE-2017-16099
- mime Regular Expression Denial of Service when MIME lookup performed on untrusted user input - CVE-2017-16138
- Regular Expression Denial of Service in timespan - CVE-2017-16115
You might also like:
- Tags:
- npm
- content
Anything's wrong? Let us know Last updated on September 08, 2023