Skip to content
OpenAdvisories

Package · Debian

node-negotiator

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High —
    CVE-2016-10539

    Regular Expression Denial of Service in negotiator

    negotiator is an HTTP content negotiator for Node.js and is used by many modules and frameworks including Express and Koa. The header for "Accept-Language", when parsed by negotiator 0.6.0 and earlier is vulnerable to Regular Expression Denial of Service via …

    HackerOne negotiator node module node-negotiator negotiator Debian Ubuntu npm