{"id":"EUVD-2018-0335","enisaUuid":"210bc6c8-3339-3853-b115-b34dcee608c4","description":"The mime module \u003c 1.4.1, 2.0.1, 2.0.2 is vulnerable to regular expression denial of service when a mime lookup is performed on untrusted user input.","datePublished":"Jun 7, 2018, 2:00:00 AM","dateUpdated":"Oct 7, 2026, 8:13:00 PM","baseScore":7.5,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","references":"https://github.com/broofa/node-mime/issues/167\nhttps://nodesecurity.io/advisories/535\n","aliases":"CVE-2017-16138\nGHSA-wrvr-8mpx-r7pp\n","assigner":"hackerone","epss":2.12,"enisaIdProduct":[{"id":"569412c8-0778-38cd-a26e-6cd286688b25","product":{"name":"mime node module","vendor":{"name":"HackerOne"}},"product_version":"\u003c 1.4.1    \u003e 2.0.0 \u003c 2.0.3"}],"enisaIdVendor":[{"id":"acd1ebbb-fdf8-3b7f-a439-7c577f149131","vendor":{"name":"HackerOne"}}],"enisaIdVulnerability":[{"id":"a9845147-57e8-3d16-bc74-1c4c16e12654","vulnerability":{"id":"CVE-2017-16138","description":"The mime module \u003c 1.4.1, 2.0.1, 2.0.2 is vulnerable to regular expression denial of service when a mime lookup is performed on untrusted user input.","datePublished":"Jun 7, 2018, 2:00:00 AM","dateUpdated":"Oct 7, 2026, 8:13:00 PM","status":"PUBLISHED","baseScore":7.5,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","references":"https://github.com/broofa/node-mime/issues/167\nhttps://nodesecurity.io/advisories/535\n","enisa_id":"EUVD-2018-0335\n","assigner":"hackerone","epss":2.12,"dataProcessed":"Oct 24, 2026, 7:15:12 AM","vulnerabilityProduct":[{"id":"55285c20-5047-34e8-aa92-1e45a47f00c2","product":{"name":"mime node module","vendor":{"name":"HackerOne"}},"product_version":"\u003c 1.4.1    \u003e 2.0.0 \u003c 2.0.3"}],"vulnerabilityVendor":[{"id":"a2422d70-bed0-3b9b-9177-de4aaaa0a39f","vendor":{"name":"HackerOne"}}]}},{"id":"d2db7a18-192e-3627-bbf3-d4817332e1de","vulnerability":{"id":"GHSA-wrvr-8mpx-r7pp","description":"mime Regular Expression Denial of Service when MIME lookup performed on untrusted user input","datePublished":"Jul 20, 2018, 4:20:52 PM","dateUpdated":"Sep 12, 2023, 6:28:52 PM","baseScore":null,"references":"https://nvd.nist.gov/vuln/detail/CVE-2017-16138\nhttps://github.com/broofa/node-mime/issues/167\nhttps://github.com/broofa/mime/commit/1df903fdeb9ae7eaa048795b8d580ce2c98f40b0\nhttps://github.com/broofa/mime/commit/855d0c4b8b22e4a80b9401a81f2872058eae274d\nhttps://github.com/broofa/mime\n","enisa_id":"EUVD-2018-0335\n","aliases":"CVE-2017-16138\nGHSA-wrvr-8mpx-r7pp\n","epss":0.0,"dataProcessed":"May 3, 2026, 1:44:14 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[{"id":"7dc42c98-a95f-399d-b17f-16b842cbfcc2","advisory":{"id":"RHSA-2021:3917","description":"Red Hat Security Advisory: Red Hat Quay v3.6.0 security, bug fix and enhancement update","summary":"An update is now available for Red Hat Quay 3.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.","datePublished":"Oct 19, 2021, 12:09:35 PM","dateUpdated":"Oct 15, 2026, 6:55:20 PM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2021:3917\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_3917.json\n","aliases":"CVE-2017-16137\nCVE-2017-16138\nCVE-2018-1107\nCVE-2018-1109\nCVE-2018-3721\nCVE-2018-3728\nCVE-2018-3774\nCVE-2018-16492\nCVE-2018-21270\nCVE-2019-20920\nCVE-2019-20922\nCVE-2019-1010266\nCVE-2020-7608\nCVE-2020-8203\nCVE-2020-15366\nCVE-2020-26237\nCVE-2020-26291\nCVE-2020-35653\nCVE-2020-35654\nCVE-2021-23364\nCVE-2021-23368\nCVE-2021-23382\nCVE-2021-25289\nCVE-2021-25290\nCVE-2021-25291\nCVE-2021-25292\nCVE-2021-25293\nCVE-2021-27515\nCVE-2021-27516\nCVE-2021-27921\nCVE-2021-27922\nCVE-2021-27923\nCVE-2021-34552\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"05a94e0b-e0fb-351a-b63d-e4921b20adad","product":{"name":"quay/quay-operator-bundle@sha256:7eeea8b3c3f9ddade8e989a5227fe2e01b7dff0546350017117a10155f16fbe1_amd64","vendor":{"name":"Red Hat"}}},{"id":"0f34d31a-0410-36bf-b296-27405b64279e","product":{"name":"quay/quay-rhel8@sha256:d8dd1cd5ccc8231a1228371935700f61f71ffcb9bc3134fe7f37c822a8ec41d3_amd64","vendor":{"name":"Red Hat"}}},{"id":"1a94a414-7886-3377-ae86-dbfeea60c366","product":{"name":"quay/quay-bridge-operator-bundle@sha256:89ff146ee1ca5fd079bfc1d1dc2f84d3215edbeb7b540f7dde390d1508133229_amd64","vendor":{"name":"Red Hat"}}},{"id":"2bf51dc3-dd8f-3535-afb5-4d5a8f20e23f","product":{"name":"quay/quay-container-security-operator-bundle@sha256:bbb7a3a4cfd9c98df1037c58d3e68e1cd8e554c0af336b08a04a914285c68edb_amd64","vendor":{"name":"Red Hat"}}},{"id":"3f5ff6e6-ac90-3c7c-b404-8727cbb7da4e","product":{"name":"quay/quay-builder-rhel8@sha256:0125935ef8a605c55c0a68233177f7ee84b9a0bc3331f496945d72c87aa84cb8_amd64","vendor":{"name":"Red Hat"}}},{"id":"4a867c2c-082f-3f53-9c5d-ef1043d4034f","product":{"name":"quay/quay-operator-rhel8@sha256:0b9639c1895923a625980cd57316065b0e192e5ae6a6a7ca5e7d31289d42f7a0_amd64","vendor":{"name":"Red Hat"}}},{"id":"60957270-43ee-3b5a-94d2-3b7b300e0adc","product":{"name":"quay/quay-container-security-operator-rhel8@sha256:860794203beca60e5961b0e69aae97c7e6d6f7e3867b476d1cc458523ec0804b_amd64","vendor":{"name":"Red Hat"}}},{"id":"7ee65ed6-1af7-38b9-85dd-056f3fd92c3a","product":{"name":"quay/quay-bridge-operator-rhel8@sha256:8ed9531542037756f556ab478b54b216e4ae631d72477dba6784eb75657d3646_amd64","vendor":{"name":"Red Hat"}}},{"id":"b3765dd8-db81-394f-bcce-aadceb427602","product":{"name":"quay/quay-builder-qemu-rhcos-rhel8@sha256:03862af902623b5c0f8ab0ce4bac896624fb0325ff5089e6cc0426f125891e6e_amd64","vendor":{"name":"Red Hat"}}},{"id":"e6fb867a-c58b-337d-a390-52d7c24a0c49","product":{"name":"quay/clair-rhel8@sha256:2cb015d00c209fa894958afccbb5ab03c0cc08d74789412343d40564c790b96d_amd64","vendor":{"name":"Red Hat"}}},{"id":"f3ab269d-fc66-3a2e-9c10-3554429eb98c","product":{"name":"Quay v3","vendor":{"name":"Red Hat"}}}]}}]}