CVE-2017-16137

תיאור (מקור, אנגלית)

The debug module is vulnerable to regular expression denial of service when untrusted user input is passed into the o formatter. It takes around 50k characters to block for 2 seconds making this a low severity issue.

מדדים

EPSS — סבירות ניצול

3% (אחוזון 100) נכון ל-18/10/2026

CWE

CWE-400

מוצרים מושפעים

debug_project: debug

קישורים

• https://github.com/visionmedia/debug/pull/504 PatchThird Party Advisory
• https://github.com/visionmedia/debug/pull/504 PatchThird Party Advisory
• https://github.com/visionmedia/debug/issues/501 Third Party Advisory
• https://lists.apache.org/thread.html/r8ba4c628fba7181af58817d452119481adce4ba9‮…
• https://lists.apache.org/thread.html/rb5ac16fad337d1f3bb7079549f97d8166d0ef308‮…
• https://nodesecurity.io/advisories/534 Third Party Advisory
• https://github.com/visionmedia/debug/issues/501 Third Party Advisory
• https://lists.apache.org/thread.html/r8ba4c628fba7181af58817d452119481adce4ba9‮…
• https://lists.apache.org/thread.html/rb5ac16fad337d1f3bb7079549f97d8166d0ef308‮…
• https://nodesecurity.io/advisories/534 Third Party Advisory