CVE-2017-16137CWE-400

CVE-2017-16137: vulnerability in HackerOne debug node module

Published · Updated

Follow this CVE+ Monitor debug node module+ Monitor debug

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 2.8%
The debug module is vulnerable to regular expression denial of service when untrusted user input is passed into the o formatter. It takes around 50k characters to block for 2 seconds making this a low severity issue.
Affected products
HackerOne · debug node module