Regular Expression Denial of Service

Overview

Affected versions of content are vulnerable to a regular expression denial of service when parsing malicious Content-Type and Content-Disposition headers.

Recommendation

Update to version 3.0.6 or later.

References

GitHub Advisory