CVE-2017-16111: Content Project Content

High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days.

The content module is a module to parse HTTP Content-* headers. It is used by the hapijs framework to provide this functionality. The module is vulnerable to regular expression denial of service when passed a specifically crafted Content-Type or Content-Disposition header.

Affected products

• Content Project Content: up to and including 3.0.5

Published 2018-06-07. Last modified 2026-06-17.