CVE-2017-16026: Improper Input Validation

June 4, 2018 (updated October 9, 2019)

If a request is made using multipart, and the body type is a number, then the specified number of non-zero memory is passed in the body.

References

github.com/request/request/issues/1904
github.com/request/request/pull/2018
nvd.nist.gov/vuln/detail/CVE-2017-16026

Code Behaviors & Features

Detect and mitigate CVE-2017-16026 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →