Overview
Affected versions of mime are vulnerable to regular expression denial of service when a mime lookup is performed on untrusted user input.
Remediation
Update to version 2.0.3 or later.
Resources
Have content suggestions? Send them to [email protected]
Advisory timeline
published
Advisory publishedSep 27th, 2017reported
Initial report by Cristian-Alexandru StaicuSep 25th, 2017