Description
The mime module < 1.4.1, 2.0.1, 2.0.2 is vulnerable to regular expression denial of service when a mime lookup is performed on untrusted user input.
Remediation
References
https://github.com/broofa/node-mime/issues/167
https://nodesecurity.io/advisories/535
Related Vulnerabilities
CVE-2021-23368 Vulnerability in npm package postcss
CVE-2021-36373 Vulnerability in maven package org.apache.ant:ant
CVE-2022-39251 Vulnerability in npm package matrix-js-sdk
CVE-2021-34078 Vulnerability in npm package lifion-verify-deps
CVE-2022-31170 Vulnerability in npm package @openzeppelin/contracts-upgradeable