{"id":"EUVD-2018-0400","revision":"513971d251cf492bb184f42f507ad32f","records":[{"revision":"513971d251cf492bb184f42f507ad32f","observedAt":"2026-11-03T16:01:01.767+00:00","statement":{"source":"euvd","id":"EUVD-2018-0400","aliases":["CVE-2017-16137","GHSA-gxpj-cx7g-858c"],"title":"The debug module is vulnerable to regular expression denial of service when untrusted user input is passed into the o formatter. It takes around 50k characters to block for 2 seconds making this a low severity issue.","description":"The debug module is vulnerable to regular expression denial of service when untrusted user input is passed into the o formatter. It takes around 50k characters to block for 2 seconds making this a low severity issue.","state":0,"publishedAt":null,"modifiedAt":null,"affected":[],"metrics":[],"references":["https://github.com/visionmedia/debug/pull/504","https://github.com/visionmedia/debug/issues/501","https://nodesecurity.io/advisories/534","https://lists.apache.org/thread.html/r8ba4c628fba7181af58817d452119481adce4ba92e889c643e4c7dd3%40%3Ccommits.netbeans.apache.org%3E","https://lists.apache.org/thread.html/rb5ac16fad337d1f3bb7079549f97d8166d0ef3082629417c39f12d63%40%3Cnotifications.netbeans.apache.org%3E"],"sourceUrl":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-0400","license":"ENISA EUVD · source terms and attribution apply","enrichment":{"sourceStatus":null,"weaknesses":[],"productCriteria":[],"sourceDates":{"datePublished":"Jun 7, 2018, 2:00:00 AM","dateUpdated":"Oct 15, 2026, 3:54:18 PM"},"relatedAdvisories":[{"id":"RHSA-2021:3917","title":"Red Hat Security Advisory: Red Hat Quay v3.6.0 security, bug fix and enhancement update","vulnerabilityIds":["CVE-2017-16137","CVE-2017-16138","CVE-2018-1107","CVE-2018-1109","CVE-2018-3721","CVE-2018-3728","CVE-2018-3774","CVE-2018-16492","CVE-2018-21270","CVE-2019-20920","CVE-2019-20922","CVE-2019-1010266","CVE-2020-7608","CVE-2020-8203","CVE-2020-15366","CVE-2020-26237","CVE-2020-26291","CVE-2020-35653","CVE-2020-35654","CVE-2021-23364","CVE-2021-23368","CVE-2021-23382","CVE-2021-25289","CVE-2021-25290","CVE-2021-25291","CVE-2021-25292","CVE-2021-25293","CVE-2021-27515","CVE-2021-27516","CVE-2021-27921","CVE-2021-27922","CVE-2021-27923","CVE-2021-34552"]}],"note":"EUVD source date text has no stated timezone and is retained without inventing a UTC instant. Related bulletin membership is not an alias, common cause or applicability claim. A missing vector with a zero score is treated as unrated. Complete vendor/product and underlying source evidence remains in the original JSON."},"key":"euvd:EUVD-2018-0400","identifiers":["EUVD-2018-0400","CVE-2017-16137","GHSA-gxpj-cx7g-858c"]},"retained":false,"historicalAffected":[]}],"coverage":[]}