CVE-2017-16119

score

<0.1

cvss

7.5

epss

1.6%

published

2018-06-07

kev added

—

first seen

2026-10-21

Fresh, a module used by Express.js, contains a regular expression denial of service caused by crafted input to parse, letting attackers block the event loop and cause denial of service, exploit requires passing malicious input.