Fresh is a module used by the Express.js framework for HTTP response freshness testing. It is vulnerable to a regular expression denial of service whe...

原文の説明

取得元が公開している説明をそのまま載せています (多くは英語)。

Fresh is a module used by the Express.js framework for HTTP response freshness testing. It is vulnerable to a regular expression denial of service when it is passed specially crafted input to parse. This causes the event loop to be blocked causing a denial of service condition.

出典: OSV.dev (Open Source Vulnerabilities) OSV

影響パッケージ

Ubuntu:16.04:LTS node-fresh

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

Ubuntu:18.04:LTS node-fresh

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

参照URL

report ubuntu.com
report nodesecurity.io
report cve.org