Signals
Back to database
Schedule42High7.5VulnerabilityCVE-2017-16119No patch link observed

CVE-2017-16119 — Fresh is a module used by the Express.js framework for HTTP response freshness testing.

Published Jun 7, 2018, 02:29 AM UTCIngested 1h agoSource NVD(cve-db)CVE-2017-16119

Description

Fresh is a module used by the Express.js framework for HTTP response freshness testing. It is vulnerable to a regular expression denial of service when it is passed specially crafted input to parse. This causes the event loop to be blocked causing a denial of service condition.

CVSS v3.1 base metrics

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
7.5

High severity

Band computed from the CVSS base score, not the source's own label — so it means the same thing across every feed.

AV

Network

Attack Vector

AC

Low

Attack Complexity

PR

None

Privileges Required

UI

None

User Interaction

S

Unchanged

Scope

C

None

Confidentiality

I

None

Integrity

A

High

Availability

Affected

Vendor
fresh project
Product
fresh

Versions

  • < 0.5.2

Stated as the source expressed them.

References

Related threats

same CWE or vendor
Medium

CVE-2026-107392 — music-metadata is a metadata parser for audio and video media files.

CVE-2026-107392 · 2h ago

Medium

CVE-2026-107391 — music-metadata is a metadata parser for audio and video media files.

CVE-2026-107391 · 2h ago

High

CVE-2026-84276 — IBM Guardium Data Protection 12.2.2 is affected by a denial-of-service vulnerability in the edge-controller.

CVE-2026-84276 · 3h ago

Medium

Coraza: Resource exhaustion via deferred file handle accumulation in multipart body processor

OSV · 5h ago

Medium

CVE-2026-61801 — The `github.com/moby/sys/user` package provides Go utilities for parsing and looking up entries in Unix-style user and group database files.

CVE-2026-61801 · 5h ago

Medium

CVE-2026-107294 — Pydantic AI is a Python agent framework for building applications and workflows with Generative AI.

CVE-2026-107294 · 5h ago