https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-19T12:41:40.968264+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2019-01750 cnvd-2019-01750 2026-10-19T12:41:40.971781+00:00 cnvd-2019-01750 https://cve.radiocsirt.org/vuln/euvd-2026-179359 EUVD-2026-179359 2026-10-19T12:41:40.971821+00:00 EUVD-2026-179359 https://cve.radiocsirt.org/vuln/fkie_cve-2017-16118 fkie_cve-2017-16118 2026-10-19T12:41:40.971842+00:00

The forwarded module is used by the Express.js framework to handle the X-Forwarded-For header. It is vulnerable to a regular expression denial of service when it's passed specially crafted input to parse. This causes the event loop to be blocked causing a denial of service condition.

 https://cve.radiocsirt.org/vuln/ghsa-mpcf-4gmh-23w8 GHSA-mpcf-4gmh-23w8 — Regular Expression Denial of Service in forwarded 2026-10-19T12:41:40.971883+00:00

Affected: npm: forwarded

Affected versions of `forwarded` are vulnerable to regular expression denial of service when parsing specially crafted user input.

## Recommendation

Update to version 0.1.2 or later

 https://cve.radiocsirt.org/vuln/gsd-2017-16118 gsd-2017-16118 2026-10-19T12:41:40.971922+00:00 gsd-2017-16118