88slot-ap (1.0.0), @andriyf/node-odata (>=0.7.15, <=0.7.1501) +469 more potentially affected by CVE-2017-16136 via method-override (>=1.0.2, <=2.3.9)

method-override NPM version =1.0.2, =0.7.15, =0.1.2-beta.1, =1.0.0, =0.13.7, =4.0.0-beta.6, =0.3.14, =0.27.6, =4.0.0, =4.2.34 and more Source cves: CVE-2017-16136 Source advisory: OSV:GHSA-QX2F-477C-35RQ...

CVE-2017-16136

method-override is a module used by the Express.js framework to let you use HTTP verbs such as PUT or DELETE in places where the client doesn't support it. method-override is vulnerable to a regular expression denial of service vulnerability when specially crafted input is passed in to be parsed...