← All advisories

High severity7.5NVD Advisory· Published Dec 24, 2021· Updated Jun 17, 2026

CVE-2021-23490

CVE-2021-23490

Description

The package parse-link-header before 2.0.0 are vulnerable to Regular Expression Denial of Service (ReDoS) via the checkHeader function.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
parse-link-headernpm	< 2.0.0	2.0.0

Affected products

3

parse-link-header/parse-link-headerdescription
ghsa-coords
pkg:npm/parse-link-header
Range: < 2.0.0
Parse Link Header Project/Parse Link Header
cpe:2.3:a:parse-link-header_project:parse-link-header:*:*:*:*:*:node.js:*:*
Range: <2.0.0

Patches

Vulnerability mechanics

References

5

github.com/thlorenz/parse-link-header/commit/72f05c717b3f129c5331a07bf300ed8886eb8ae1nvdPatchThird Party AdvisoryWEB
snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-2321973nvdExploitPatchThird Party AdvisoryWEB
snyk.io/vuln/SNYK-JS-PARSELINKHEADER-1582783nvdExploitPatchThird Party AdvisoryWEB
github.com/advisories/GHSA-q674-xm3x-2926ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2021-23490ghsaADVISORY

News mentions

0

No linked articles in our index yet.