Skip to content
OpenAdvisories
High · 7.5 CVE-2014-8882 GHSA-f5w6-r7rg-mcgq

Regular Expression Denial of Service in validator

Published Aug 31, 2020 · Updated Nov 8, 2023 · Assigned by GHSA

Description

Versions of `validator` prior to 3.22.1 are affected by a regular expression denial of service vulnerability in the `isURL` method.

## Recommendation

Update to version 3.22.1 or later.

Affected packages

EcosystemPackageAffectedFixedRecord
npm validator < 3.22.1 3.22.1 GHSA-f5w6-r7rg-mcgq

References