multiparty vulnerable to Denial of Service via unbounded part-header accumulation
multiparty is a Node.js library for parsing multipart/form-data request bodies.
11 records
multiparty is a Node.js library for parsing multipart/form-data request bodies.
[email protected] and lower versions are vulnerable to denial of service via uncaught exception.
[email protected] and lower versions are vulnerable to denial of service via uncaught exception.
[email protected] and lower versions are vulnerable to denial of service via regular expression backtracking in the Content-Disposition filename parameter parser.
Impact: When using multiple wildcards, combined with at least one parameter, a regular expression can be generated that is vulnerable to ReDoS.
Impact: A bad regular expression is generated any time you have multiple sequential optional groups (curly brace syntax), such as `{a}{b}{c}:z`.
Impact: A bad regular expression is generated any time you have three or more parameters within a single segment, separated by something that is not a period (.).
path-to-regexp turns path strings into a regular expressions.
Send is a library for streaming files from the file system as a http response.
path-to-regexp turns path strings into a regular expressions.
The npm hbs package is an Express view engine wrapper for Handlebars.