高危
漏洞预警
CVSS 7.5
CVE-2026-119202：@hapi/content provides HTTP Content-* header parsing. From 3.0.6 until
@hapi/content provides HTTP Content-* header parsing. From 3.0.6 until 6.0.3, Content.disposition() uses an unanchored parameter-name expression in a global regular-expression scan, causing repeated failed matching over…