Description

The mime module < 1.4.1, 2.0.1, 2.0.2 is vulnerable to regular expression denial of service when a mime lookup is performed on untrusted user input.

Remediation

References

https://github.com/broofa/node-mime/issues/167

https://nodesecurity.io/advisories/535

Related Vulnerabilities

CVE-2017-3208 Vulnerability in maven package com.exadel.flamingo.flex:amf-serializer

CVE-2023-48796 Vulnerability in maven package org.apache.dolphinscheduler:dolphinscheduler-standalone-server

CVE-2020-14968 Vulnerability in maven package org.webjars.npm:jsrsasign

CVE-2020-28277 Vulnerability in maven package org.webjars.npm:dset

CVE-2020-2149 Vulnerability in maven package org.jenkins-ci.plugins:repository-connector

Severity

High

Classification

CWE-400 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Tags

Exploit Third Party Advisory