CVE-2021-23490

Published December 24th, 2021

View on NVD ↗

CVSS v3

7.5

HIGH

CVSS v2

5

MEDIUM

Affected

1

PROJECT

Description

The package parse-link-header before 2.0.0 are vulnerable to Regular Expression Denial of Service (ReDoS) via the checkHeader function.

thlorenz/parse-link-header

Parses a link header and returns paging information for each contained link.

GitHub

300