mime Regular Expression Denial of Service when MIME lookup performed on untrusted user input

높음 7.5CVE-2017-16138 · GHSA-wrvr-8mpx-r7pp · Published 07/06/2018 · updated 07/10/2026

요약

Package	Affected versions	Patched versions
mime mime_project	`≥ 2.0.1, < 2.0.3< 1.4.1`	`2.0.31.4.1`
mime npm	`≥ 2.0.0, < 2.0.3< 1.4.1`	`2.0.31.4.1`

Affected versions of mime are vulnerable to regular expression denial of service when a mime lookup is performed on untrusted user input.

Update to version 2.0.3 or later.

NVD description

The mime module < 1.4.1, 2.0.1, 2.0.2 is vulnerable to regular expression denial of service when a mime lookup is performed on untrusted user input.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.