Asymmetric denial of service In negotiator
Description
Regular Expression Denial of Service in negotiator
Affected versions of negotiator are vulnerable to regular expression denial of service attacks, which trigger upon parsing a specially crafted Accept-Language header value.
Recommendation
Update to version 0.6.1 or later.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Component | Affected version | Patched versions |
|---|---|---|---|
 npm | 0.6.1 | ||
 debian 13 | 0.6.1-1 | ||
debian 11 | 0.6.1-1 | ||
debian 14 | 0.6.1-1 | ||
debian 12 | 0.6.1-1 |
Aliases
1. 2. 3. 4. 5. 6. 7.
References
1.