Skip to content
OpenAdvisories

Package · npm

npm-user-validate

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 7.5
    CVE-2020-7754

    Regular Expression Denial of Service (ReDoS)

    This affects the package npm-user-validate before 1.0.1. The regex that validates user emails took exponentially longer to process long input strings beginning with @ characters.

    npm-user-validate npm