GHSA-mpcf-4gmh-23w8

GitHub Security Advisory

Regular Expression Denial of Service in forwarded

✓ GitHub Reviewed HIGH Has CVE

Affected versions of `forwarded` are vulnerable to regular expression denial of service when parsing specially crafted user input.

## Recommendation

Update to version 0.1.2 or later

npm forwarded

Affected versions: 0 (fixed in 0.1.2)

CVE-2017-16118

GHSA ID

GHSA-mpcf-4gmh-23w8

Published

July 24, 2018 8:16 PM

Last Modified

September 11, 2023 10:05 PM

CVSS Score

7.5 /10

Primary Ecosystem

npm

Primary Package

forwarded

GitHub Reviewed

✓ Yes

Last updated: July 4, 2025 6:27 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.