Description
The mime module < 1.4.1, 2.0.1, 2.0.2 is vulnerable to regular expression denial of service when a mime lookup is performed on untrusted user input.
Remediation
References
https://github.com/broofa/node-mime/issues/167
https://nodesecurity.io/advisories/535
Related Vulnerabilities
CVE-2020-8441 Vulnerability in maven package org.jyaml:jyaml
CVE-2021-23426 Vulnerability in npm package proto
CVE-2023-31719 Vulnerability in npm package @frangoteam/fuxa
CVE-2020-27216 Vulnerability in maven package org.eclipse.jetty:jetty-webapp
CVE-2023-38286 Vulnerability in maven package de.codecentric:spring-boot-admin-server