http-server vulnerabilities

1 known vulnerability in http-server from Adonisjs. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.7 High severity

  http-server: Uncontrolled Resource Consumption

  CVE-2026-104150Oct 15, 2026Adonisjs

  AdonisJS HTTP Server is a package for handling HTTP requests in the AdonisJS framework. Prior to 8.2.2 and 9.1.1, the regular expression returned by router.matchers.slug() contains adjacent greedy repetitions with overlapping character classes. When an applica