CVE-2017-16136

Name of the Vulnerable Software and Affected Versions: method-override versions prior to 2.3.10

Description: The issue concerns a regular expression denial of service vulnerability. It occurs when specially crafted input is passed to be parsed via the X-HTTP-Method-Override header. This can happen when untrusted user input is passed into this header.

Recommendations: Update to version 2.3.10 or later. As a temporary workaround, consider restricting the use of the X-HTTP-Method-Override header to minimize the risk of exploitation.