Ecosyste.ms: Advisories

Security Advisories: MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLW1wY2YtNGdtaC0yM3c4

Regular Expression Denial of Service in forwarded

Affected versions of forwarded are vulnerable to regular expression denial of service when parsing specially crafted user input.

Recommendation

Update to version 0.1.2 or later

Permalink: https://github.com/advisories/GHSA-mpcf-4gmh-23w8
JSON: https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLW1wY2YtNGdtaC0yM3c4
Source: GitHub Advisory Database
Origin: Unspecified
Severity: High
Classification: General
Published: almost 6 years ago
Updated: 8 months ago

CVSS Score: 7.5
CVSS vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Identifiers: GHSA-mpcf-4gmh-23w8, CVE-2017-16118
References:

• https://nvd.nist.gov/vuln/detail/CVE-2017-16118
• https://github.com/advisories/GHSA-mpcf-4gmh-23w8
• https://www.npmjs.com/advisories/527
• http://www.securityfocus.com/bid/104427

Blast Radius: 49.6

Affected Packages