Skip to content
OpenAdvisories

Product · HackerOne

method-override node module

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2017-16136

    method-override ReDoS when untrusted user input passed into X-HTTP-Method-Override header

    method-override is a module used by the Express.js framework to let you use HTTP verbs such as PUT or DELETE in places where the client doesn't support it. method-override is vulnerable to a regular expression denial of service vulnerability when specially cr…

    HackerOne method-override node module method-override npm