Lucene search
Adam BaldwinNODEJS:106HistoryMay 04, 2016 - 4:34 p.m.
Regular Expression Denial of Service
2016-05-0416:34:12
Adam Baldwin
www.npmjs.com
23
0.001 Low
EPSS
Percentile
44.7%
Overview
Affected versions of negotiator are vulnerable to regular expression denial of service attacks, which trigger upon parsing a specially crafted Accept-Language header value.
Recommendation
Update to version 0.6.1 or later.
References
| CPE | Name | Operator | Version |
|---|---|---|---|
| negotiator | le | 0.6.0 |
Related
cve
cve
CVE-2016-10539
2018-05-31 20:29:01
CVE-2016-1000022
2019-12-20 13:15:11
osv
osv
Regular Expression Denial of Service in negotiator
2018-10-09 00:30:30
CVE-2016-10539
2018-05-31 20:29:01
prion
prion
Design/Logic Flaw
2018-05-31 20:29:00
Design/Logic Flaw
2019-12-20 13:15:00
nvd
nvd
CVE-2016-10539
2018-05-31 20:29:01
CVE-2016-1000022
2019-12-20 13:15:11
cvelist
cvelist
CVE-2016-10539
2018-04-26 00:00:00
debiancve
debiancve
CVE-2016-10539
2018-05-31 20:29:01
github
github
Regular Expression Denial of Service in negotiator
2018-10-09 00:30:30
ubuntucve
ubuntucve
CVE-2016-10539
2018-05-31 00:00:00