CVE-2017-16138

5

MEDIUMCVSS v2

Published

June 7, 2018

Affected

4 projects

Assigned by

Severity scale

010

Description

The mime module < 1.4.1, 2.0.1, 2.0.2 is vulnerable to regular expression denial of service when a mime lookup is performed on untrusted user input.

NPMA comprehensive library for mime-type mapping

< 1.4.1, >= 2.0.1, < 2.0.3NVD

GitHubMime types for JavaScript

< 1.4.1, >= 2.0.1, < 2.0.3NVD

NPM

Stub TypeScript definitions entry for mime, which provides its own types definitions

< 1.4.1, >= 2.0.1, < 2.0.3NVD

GitHubCustomise the mime-type returned with any static resource

< 1.4.1, >= 2.0.1, < 2.0.3NVD