Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:npm/forwarded@0.1.2
purl pkg:npm/forwarded@0.1.2
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (2)
Vulnerability Summary Aliases
VCID-32ge-q8yy-nbcc Regular Expression Denial of Service The forwarded module is vulnerable to a regular expression denial of service when it's passed specially crafted input to parse. This causes the event loop to be blocked causing a denial of service condition. GMS-2017-233
VCID-a8xu-5hwh-t3cz Uncontrolled Resource Consumption The forwarded module is used by the Express.js framework to handle the `X-Forwarded-For` header. It is vulnerable to a regular expression denial of service when it's passed specially crafted input to parse. This causes the event loop to be blocked causing a denial of service condition. CVE-2017-16118

Date Actor Action Vulnerability Source VulnerableCode Version
2026-06-02T04:37:52.555350+00:00 GitLab Importer Fixing VCID-a8xu-5hwh-t3cz https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/forwarded/CVE-2017-16118.yml 38.6.0
2026-06-02T04:37:06.772055+00:00 GitLab Importer Fixing VCID-32ge-q8yy-nbcc https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/forwarded/GMS-2017-233.yml 38.6.0