CVE-2017-16136

https://notcve.org/view.php?id=CVE-2017-16136

07 Jun 2018 — method-override is a module used by the Express.js framework to let you use HTTP verbs such as PUT or DELETE in places where the client doesn't support it. method-override is vulnerable to a regular expression denial of service vulnerability when specially crafted input is passed in to be parsed via the X-HTTP-Method-Override header. method-override es un módulo empleado por el framework Express.js para permitir el uso de verbos HTTP como PUT o DELETE en lugares no soportados por el cliente. method-override... • https://github.com/ossf-cve-benchmark/CVE-2017-16136 • CWE-400: Uncontrolled Resource Consumption •