Lucene search
GoogleOSV:GHSA-7MC5-CHHP-FMC3HistoryOct 09, 2018 - 12:30 a.m.
Regular Expression Denial of Service in negotiator
2018-10-0900:30:30
Google
osv.dev
6
0.001 Low
EPSS
Percentile
44.7%
Affected versions of negotiator are vulnerable to regular expression denial of service attacks, which trigger upon parsing a specially crafted Accept-Language header value.
Recommendation
Update to version 0.6.1 or later.
| CPE | Name | Operator | Version |
|---|---|---|---|
| negotiator | lt | 0.6.1 |
Related
cvelist
cvelist
CVE-2016-10539
2018-04-26 00:00:00
debiancve
debiancve
CVE-2016-10539
2018-05-31 20:29:01
cve
cve
CVE-2016-10539
2018-05-31 20:29:01
CVE-2016-1000022
2019-12-20 13:15:11
prion
prion
Design/Logic Flaw
2018-05-31 20:29:00
Design/Logic Flaw
2019-12-20 13:15:00
osv
osv
CVE-2016-10539
2018-05-31 20:29:01
nvd
nvd
CVE-2016-10539
2018-05-31 20:29:01
CVE-2016-1000022
2019-12-20 13:15:11
nodejs
nodejs
Regular Expression Denial of Service
2016-05-04 16:34:12
github
github
Regular Expression Denial of Service in negotiator
2018-10-09 00:30:30
ubuntucve
ubuntucve
CVE-2016-10539
2018-05-31 00:00:00