RHEL 8 : nodejs-mime (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - nodejs-mime: Regular expression Denial of Service CVE-2017-16138 Note that Nessus has not tested for this issue but...

00ld8nuivn (2.1.0), 00rqiw31nd (2.1.0) +33824 more potentially affected by CVE-2017-16138 via mime (>=1.0.0, <=1.4.0)

mime NPM version =1.0.0, =1.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on mime and may be impacted: - 00ld8nuivn 2.1.0 - 00rqiw31nd 2.1.0 - 01dk01majk 2.1.0 - 02rjq8i863 1.1.0 - 02vx8qsp01 2.1.0 - 05y6tjgmws 1.1.0 - 066m7q8o0z 2.1.0 - 06buj9h3su...

CVE-2017-16138

The mime module is vulnerable to regular expression denial of service when a mime lookup is performed on untrusted user input...

CVE-2017-16138

CVE-2017-16138 affects the mime Node.js module, with vulnerable versions including

CVE-2017-16138

The mime module 1.4.1, 2.0.1, 2.0.2 is vulnerable to regular expression denial of service when a mime lookup is performed on untrusted user input...