CVE-2017-16138

CVE-2017-16138

Vendor Hackerone

Product mime node module

Weakness CWE-400

Published June 7, 2018

Last update September 16, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The mime module < 1.4.1, 2.0.1, 2.0.2 is vulnerable to regular expression denial of service when a mime lookup is performed on untrusted user input.

Key dates

02Disclosure timeline

June 7, 2018 CVE published

September 16, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2017-16138 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/400.html

Related vulnerabilities

04Related CVE

CVE-2026-49762 Unbounded integer parsing in the Version module enables CPU and memory exhaustion denial of service CVE-2023-3593 Server crash via a specially crafted markdown input CVE-2025-29898 Qsync Central CVE-2023-50730 Grackle has StackOverflowError in GraphQL query processing CVE-2018-6922