Skip to content
OpenAdvisories

Product · HackerOne

forwarded node module

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2017-16118

    Regular Expression Denial of Service in forwarded

    The forwarded module is used by the Express.js framework to handle the X-Forwarded-For header. It is vulnerable to a regular expression denial of service when it's passed specially crafted input to parse. This causes the event loop to be blocked causing a den…

    HackerOne forwarded node module forwarded npm