UBUNTU-CVE-2016-10539

negotiator is an HTTP content negotiator for Node.js and is used by many modules and frameworks including Express and Koa. The header for "Accept-Language", when parsed by negotiator 0.6.0 and earlier is vulnerable to Regular Expression Denial of Service via a specially crafted string...

CVE-2016-10539

negotiator is an HTTP content negotiator for Node.js and is used by many modules and frameworks including Express and Koa. The header for "Accept-Language", when parsed by negotiator 0.6.0 and earlier is vulnerable to Regular Expression Denial of Service via a specially crafted string...

cnpmjs.org (>=2.0.0-beta0, <=2.0.0-rc.3), json2html-cli (>=0.0.2, <=0.0.8) +1 more potentially affected by CVE-2014-10065 via remarkable (1.3.0)

remarkable NPM version 1.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on remarkable and may be impacted: - cnpmjs.org =2.0.0-beta0, =0.0.2, =0.0.8 - koa-markdown 1.0.0 Source cves: CVE-2014-10065 Source advisory: MEND:CVE-2014-10065...

koa.com XSS vulnerability

Vulnerable URL: http://koa.com/find-a-koa/?s=ext"map":"search":"asd" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 23304 VIP website status:| Yes Coordinated Disclosure Timeline:...