TI-2026-27366 CVE-2026-35213 · GHSA-jg4p-7fhp-p32p
Regular Expression Denial of Service (ReDoS) in @hapi/content HTTP header parsing
Priority MEDIUM 44
@hapi/content provided HTTP Content-* headers parsing.
Content Project
Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
Content Project records in CISA KEVNo Content Project vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
2 records in Content · all components
TI-2017-11831 CVE-2017-16111 · GHSA-x6wp-rfwh-hcx7
Uncontrolled resource consumption in HackerOne content node module
Priority LOW 35
The content module is a module to parse HTTP Content-* headers.