CVE-2017-16119EPSS p74.9%
CVE-2017-16119CVE-2017-16119
fresh_project / fresh
Description
Fresh is a module used by the Express.js framework for HTTP response freshness testing. It is vulnerable to a regular expression denial of service when it is passed specially crafted input to parse. This causes the event loop to be blocked causing a denial of service condition.
Scoring
| CVSS | 7.5 () |
| Vector | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
| EPSS | 1.58% probability of exploitation · percentile 74.9% · 2026-10-10T12:00:23Z |
| Last modified | 2026-10-08 |