Most recent entries from all https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 01 Oct 2026 11:40:28 +0000 CVE-2026-35213 — Regular Expression Denial of Service (ReDoS) in @hapi/content HTTP header parsing https://vulnerability.circl.lu/vuln/cve-2026-35213 <p><strong>Affected:</strong> hapijs content</p> <p>@hapi/content provided HTTP Content-* headers parsing. All versions of @hapi/content through 6.0.0 are vulnerable to Regular Expression Denial of Service (ReDoS) via crafted HTTP header values. Three regular expressions used to parse Content-Type and Content-Disposition headers contain patterns susceptible to catastrophic backtracking. This vulnerability is fixed in 6.0.1.</p> <p><strong>Affected:</strong> hapijs content</p> <p>@hapi/content provided HTTP Content-* headers parsing. All versions of @hapi/content through 6.0.0 are vulnerable to Regular Expression Denial of Service (ReDoS) via crafted HTTP header values. Three regular expressions used to parse Content-Type and Content-Disposition headers contain patterns susceptible to catastrophic backtracking. This vulnerability is fixed in 6.0.1.</p> https://vulnerability.circl.lu/vuln/cve-2026-35213