expressjs method-override vulnerabilities

Latest expressjs method-override CVEs

Newest publication first

1. CVE-2017-16136 method-override ReDoS when untrusted user input passed into X-HTTP-Method-Override header

   Published 2018-06-07

   High·CVSS 7.5 EPSS 1.2%

   method-override is a module used by the Express.js framework to let you use HTTP verbs such as PUT or DELETE in places where the client doesn't support it. method-override is vulnerable to a regular expression denial of service vulnerability when specially crafted input is passed...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.