RSS   Podatności dla 'Negotiator'   RSS

2019-12-20
 
CVE-2016-1000022

CWE-400
 

 
negotiator before 0.6.1 is vulnerable to a regular expression DoS

 
2018-05-31
 
CVE-2016-10539

CWE-20
 

 
negotiator is an HTTP content negotiator for Node.js and is used by many modules and frameworks including Express and Koa. The header for "Accept-Language", when parsed by negotiator 0.6.0 and earlier is vulnerable to Regular Expression Denial of Service via a specially crafted string.

 


Copyright 2021, cxsecurity.com

 

Back to Top