{"id":"EUVD-2018-0335","revision":"aa65c3ac3bb441e994660b58be68a64d","records":[{"revision":"aa65c3ac3bb441e994660b58be68a64d","observedAt":"2026-11-07T17:09:41.836+00:00","statement":{"source":"euvd","id":"EUVD-2018-0335","aliases":["CVE-2017-16138","GHSA-wrvr-8mpx-r7pp"],"title":"The mime module < 1.4.1, 2.0.1, 2.0.2 is vulnerable to regular expression denial of service when a mime lookup is performed on untrusted user input.","description":"The mime module < 1.4.1, 2.0.1, 2.0.2 is vulnerable to regular expression denial of service when a mime lookup is performed on untrusted user input.","state":0,"publishedAt":null,"modifiedAt":null,"affected":[],"metrics":[{"system":"EUVD CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","score":7.5,"severity":null}],"references":["https://github.com/broofa/node-mime/issues/167","https://nodesecurity.io/advisories/535"],"sourceUrl":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-0335","license":"ENISA EUVD · source terms and attribution apply","enrichment":{"sourceStatus":null,"weaknesses":[],"productCriteria":[],"sourceDates":{"datePublished":"Jun 7, 2018, 2:00:00 AM","dateUpdated":"Oct 7, 2026, 8:13:00 PM"},"relatedAdvisories":[{"id":"RHSA-2021:3917","title":"Red Hat Security Advisory: Red Hat Quay v3.6.0 security, bug fix and enhancement update","vulnerabilityIds":["CVE-2017-16137","CVE-2017-16138","CVE-2018-1107","CVE-2018-1109","CVE-2018-3721","CVE-2018-3728","CVE-2018-3774","CVE-2018-16492","CVE-2018-21270","CVE-2019-20920","CVE-2019-20922","CVE-2019-1010266","CVE-2020-7608","CVE-2020-8203","CVE-2020-15366","CVE-2020-26237","CVE-2020-26291","CVE-2020-35653","CVE-2020-35654","CVE-2021-23364","CVE-2021-23368","CVE-2021-23382","CVE-2021-25289","CVE-2021-25290","CVE-2021-25291","CVE-2021-25292","CVE-2021-25293","CVE-2021-27515","CVE-2021-27516","CVE-2021-27921","CVE-2021-27922","CVE-2021-27923","CVE-2021-34552"]}],"note":"EUVD source date text has no stated timezone and is retained without inventing a UTC instant. Related bulletin membership is not an alias, common cause or applicability claim. A missing vector with a zero score is treated as unrated. Complete vendor/product and underlying source evidence remains in the original JSON."},"key":"euvd:EUVD-2018-0335","identifiers":["EUVD-2018-0335","CVE-2017-16138","GHSA-wrvr-8mpx-r7pp"]},"retained":false,"historicalAffected":[]}],"coverage":[]}