88slot-ap (1.0.0), @andriyf/node-odata (>=0.7.15, <=0.7.1501) +467 more potentially affected by CVE-2017-16136 via method-override (>=1.0.2, <=2.3.9)

method-override NPM version =1.0.2, =0.7.15, =0.1.2-beta.1, =1.0.0, =0.13.7, =4.0.0-beta.6, =0.3.14, =0.27.6, =4.0.0, =4.2.34 and more Source cves: CVE-2017-16136 Source advisory: OSV:GHSA-QX2F-477C-35RQ...

@sydcon/ghop (>=0.27.6, <=0.27.9), amid (>=1.2.0, <=1.2.5) +100 more potentially affected by CVE-2017-16136 via method-override (1.0.2)

method-override NPM version 1.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on method-override and may be impacted: - @sydcon/ghop =0.27.6, =1.2.0, =0.0.3, =0.1.0, =0.0.0, =0.0.1, =1.3.1, =1.0.0, =0.1.0, =0.0.0, =0.0.0, =0.9.0, =0.9.1 and more Sourc...

88slot-ap (1.0.0), @andriyf/node-odata (>=0.7.15, <=0.7.1501) +370 more potentially affected by CVE-2017-16136 via method-override (>=2.0.0, <=2.3.9)

method-override NPM version =2.0.0, =0.7.15, =0.1.2-beta.1, =1.0.0, =0.13.7, =4.0.0-beta.6, =0.3.14, =4.0.0, =0.0.1, =0.0.52 and more Source cves: CVE-2017-16136 Source advisory: GHSA-QX2F-477C-35RQ...

CVE-2017-16136

method-override is a module used by the Express.js framework to let you use HTTP verbs such as PUT or DELETE in places where the client doesn't support it. method-override is vulnerable to a regular expression denial of service vulnerability when specially crafted input is passed in to be parsed...