CVE-2017-20160: 
JavaScript vulnerability analysis and mitigation

A critical vulnerability was discovered in flitto express-param up to version 0.x, identified as CVE-2017-20160. The vulnerability affects an unknown part of the file lib/ component (NVD).

The vulnerability was addressed through improvements to the fetchParams functionality. The changes included protection against HTTP Parameter Pollution attacks and the addition of new type options (int, float) for parameters. The fix also included adding geo-info to extra options and modifying how parameter values are handled when multiple values are present (GitHub PR).

The vulnerability was classified as critical, potentially affecting applications using the flitto express-param library. The exact impact details were not fully disclosed in the available sources.

The vulnerability was fixed in a later release of the express-param library. The fix included changes to parameter handling and type validation, particularly addressing HTTP Parameter Pollution attacks. The solution involved implementing stricter parameter type checking and adding new type options for better parameter validation (GitHub Commit).