CVE-2017-16136

https://notcve.org/view.php?id=CVE-2017-16136

method-override is a module used by the Express.js framework to let you use HTTP verbs such as PUT or DELETE in places where the client doesn't support it. method-override is vulnerable to a regular expression denial of service vulnerability when specially crafted input is passed in to be parsed via the X-HTTP-Method-Override header. method-override es un módulo empleado por el framework Express.js para permitir el uso de verbos HTTP como PUT o DELETE en lugares no soportados por el cliente. method-override es vulnerable a una denegación de servicio (DoS) por expresiones regulares cuando se pasan entradas especialmente manipuladas para que sean analizadas por la cabecera X-HTTP-Method-Override. • https://github.com/ossf-cve-benchmark/CVE-2017-16136 https://nodesecurity.io/advisories/538 • CWE-400: Uncontrolled Resource Consumption •