CVE-2017-16099CWE-400

The no-case module is vulnerable to regular expression denial of service

published June 7, 2018

CVSS
—
EPSS
2%
Percentile
75.0
In the wild
Unconfirmed
What it is

The no-case module is vulnerable to regular expression denial of service. When malicious untrusted user input is passed into no-case it can block the event loop causing a denial of service condition.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01559 · 75.0th percentile
Weakness
CWE-400 · Uncontrolled Resource Consumption
Published
2018-06-07T02:00Z
EPSS history
Timeline
  • 07 JUN 02:00Z
    The no-case module is vulnerable to regular expression denial of service
    cvelistv5