high7.5
CVE-2017-16138
The mime module < 1.4.1, 2.0.1, 2.0.2 is vulnerable to regular expression denial of service when a mime lookup is performed on untrusted user input.
Impact
The mime module < 1.4.1, 2.0.1, 2.0.2 is vulnerable to regular expression denial of service when a mime lookup is performed on untrusted user input.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mime Project | Mime | before 1.4.1 from 2.0.1 before 2.0.3 |