npm vulnerability intelligence
negotiator
NPM Package
Vulnerability Check
HTTP content negotiation
High severity MIT
v1.0.0
Vulnerability Analysis
OSV Live
negotiator
v1.0.0 · MIT
Advisory Breakdown
Severity Rating
High severity1 advisory
High severity
Weekly downloads
—
Total advisories
1
Latest version
1.0.0
License
MIT
Known advisories
OSV records for the npm ecosystem
GHSA-7mc5-chhp-fmc3 CVE-2016-10539 high
Regular Expression Denial of Service in negotiator
Affected: >=0 <0.6.1 Fixed in: 0.6.1 Updated Nov 8, 2023
View source
Checked Aug 9, 2026, 4:21 AM from npm and OSV.dev
Package metadata
From the npm registry
- Package name
- negotiator
- Ecosystem
- npm
- Latest version
- 1.0.0
- License
- MIT
- Weekly downloads
- Unavailable
- Repository
- Open repository
Remediation boundary
What RequestGuard does — and doesn't — cover
RequestGuard does not fix npm package vulnerabilities. Dependency remediation happens through package updates, patches, lockfile changes, and maintainer guidance. RequestGuard can help mitigate runtime abuse around exposed web and API flows while remediation is handled separately.
Data from npm registry and OSV.dev · Checked 8/9/2026, 4:21:44 AM