CVE-2016-10539

The CVE-2016-10539 issue affects the negotiator npm package (Node.js) ≤0.6.0, where parsing the Accept-Language header can trigger a Regular Expression Denial of Service via a specially crafted input. The vulnerability impacts modules/frameworks using negotiator (e.g., Express, Koa). Remediation:...