Skip to content
OpenAdvisories
High · 7.5 CVE-2021-23490 EUVD-2022-0673GHSA-q674-xm3x-2926

Regular Expression Denial of Service (ReDoS)

Published Dec 24, 2021 · Updated Sep 16, 2024 · Assigned by snyk

Package: parse-link-header Ecosystem: npm

Description

The package parse-link-header before 2.0.0 are vulnerable to Regular Expression Denial of Service (ReDoS) via the checkHeader function.

Affected products

VendorProductAffectedFixed
— parse-link-header unspecified – < 2.0.0 2.0.0

Affected packages

EcosystemPackageAffectedFixedRecord
npm parse-link-header < 2.0.0 2.0.0 GHSA-q674-xm3x-2926

References