7.5
Élevée
CVE-2021-23490 The package parse-link-header before 2.0.0 are vulnerable to Regular Expression Denial of Service (ReDoS) via the…
Description
The package parse-link-header before 2.0.0 are vulnerable to Regular Expression Denial of Service (ReDoS) via the checkHeader function.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| parse-link-header 2.0 | premières → < 2.0.0 | 2.0.0 |