Description
The mime module < 1.4.1, 2.0.1, 2.0.2 is vulnerable to regular expression denial of service when a mime lookup is performed on untrusted user input.
Remediation
References
https://github.com/broofa/node-mime/issues/167
https://nodesecurity.io/advisories/535
Related Vulnerabilities
CVE-2021-37695 Vulnerability in maven package org.webjars.npm:ckeditor4
CVE-2023-26120 Vulnerability in maven package com.xuxueli:xxl-job
CVE-2019-10795 Vulnerability in maven package org.webjars.npm:undefsafe
CVE-2021-33611 Vulnerability in maven package org.webjars.bowergithub.vaadin:vaadin-menu-bar
CVE-2022-36083 Vulnerability in npm package jose-node-esm-runtime