CVE Intelligence

Vulnerabilidades do Fresh Project Fresh

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Fresh Project Fresh: 1 registro(s), com versões afetadas e correções.
cpe:2.3:a:fresh_project:fresh

CVE-2017-16119 Alta · 7.5 CWE-400 06/06/2018
Uncontrolled Resource Consumption em Fresh Project Fresh
Fresh is a module used by the Express.js framework for HTTP response freshness testing. It is vulnerable to a regular expression denial of service when it is passed specially crafted input to parse. This causes the event loop to be blocked causing a denial of service condition.