CVE-2017-16099: No-Case Project No-Case

High severity, CVSS 7.5. EPSS: 1.6% chance of exploitation in the next 30 days.

The no-case module is vulnerable to regular expression denial of service. When malicious untrusted user input is passed into no-case it can block the event loop causing a denial of service condition.

Affected products

• No-Case Project No-Case: before 2.3.2 (fixed in 2.3.2)

Published 2018-06-07. Last modified 2026-06-17.