Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
negotiator is an HTTP content negotiator for Node.js and is used by many modules and frameworks including Express and Koa. The header for "Accept-Language", when parsed by negotiator 0.6.0 and earlier is vulnerable to Regular Expression Denial of Service via a specially crafted string.
CVSS Information
N/A
Vulnerability Type
未加控制的资源消耗(资源穷尽)
Vulnerability Title
negotiator 安全漏洞
Vulnerability Description
negotiator是一个基于Node.js的HTTP内容协商模块。 negotiator 0.6.0及之前版本中存在安全漏洞。攻击者可借助特制的字符串利用该漏洞造成拒绝服务。
CVSS Information
N/A
Vulnerability Type
N/A