CVE-2017-16114

Severity: High
CVSS: 7.5 · CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CISA KEV: Not in the cached KEV catalog
EPSS: No cached EPSS score

Affected and fixed versions

OSV did not list a semver range for this package on the entry we stored.

Plain-language text is shown only when it is already cached. This page does not generate it.

The marked module is vulnerable to a regular expression denial of service. Based on the information published in the public issue, 1k characters can block for around 6 seconds.

Aliases: GHSA-x5pg-88wf-qq4p

Advisory on OSV.dev · published 2018-06-07 · modified 2026-10-20

Affected packages

OSV did not name a package on this entry.

Scan your repository

This page is one package or one advisory. A repository scan checks the lockfile, what the code imports, and can open a pull request. Public scans need no account.

CVE-2017-16114 — Scandar