7.5
High
CVE-2021-23490 The package parse-link-header before 2.0.0 are vulnerable to Regular Expression Denial of Service (ReDoS) via the…
Description
The package parse-link-header before 2.0.0 are vulnerable to Regular Expression Denial of Service (ReDoS) via the checkHeader function.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| parse-link-header 2.0 | earliest → < 2.0.0 | 2.0.0 |