Vulnerabilities (CVE)

Filtered by vendor Forwarded Project Subscribe
Filtered by product Forwarded
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2017-16118 1 Forwarded Project 1 Forwarded 2023-12-10 5.0 MEDIUM 7.5 HIGH
The forwarded module is used by the Express.js framework to handle the X-Forwarded-For header. It is vulnerable to a regular expression denial of service when it's passed specially crafted input to parse. This causes the event loop to be blocked causing a denial of service condition.