Vulnerabilidades de HackerOne
CVEs publicadas que afetam produtos de HackerOne: 3 registro(s), com severidade, exploração e correções.
CVE-2017-16137
Média · 5.3
CWE-400 06/06/2018
Regular Expression Denial of Service in debug
The debug module is vulnerable to regular expression denial of service when untrusted user input is passed into the o formatter. It takes around 50k characters to block for 2 seconds making this a low severity issue.
CVE-2017-16138
Alta · 7.5
CWE-400 06/06/2018
Uncontrolled Resource Consumption em Mime Project Mime
The mime module < 1.4.1, 2.0.1, 2.0.2 is vulnerable to regular expression denial of service when a mime lookup is performed on untrusted user input.
CVE-2017-16119
Alta · 7.5
CWE-400 06/06/2018
Uncontrolled Resource Consumption em Fresh Project Fresh
Fresh is a module used by the Express.js framework for HTTP response freshness testing. It is vulnerable to a regular expression denial of service when it is passed specially crafted input to parse. This causes the event loop to be blocked causing a denial of service condition.