Back to search
CVE-2017-16116
Published: Jun 7, 2018
Modified: Sep 16, 2024
PUBLISHED
Description
The string module is a module that provides extra string operations. The string module is vulnerable to regular expression denial of service when specifically crafted untrusted user input is passed into the underscore or unescapeHTML methods.
| Vendor | Product | Versions |
|---|---|---|
HackerOne | string node module | affected All versions |
Weaknesses (CWE)
References
https://github.com/jprichardson/string.js/issues/212
x_refsource_MISC
https://nodesecurity.io/advisories/536
x_refsource_MISC
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now