Description
jshamcrest is vulnerable to regular expression denial of service (ReDoS) when certain types of user input is passed in to the emailAddress validator.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| HackerOne | jshamcrest node module | All versions | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | jshamcrest | <= 0.7.1 | — | GHSA-xj62-87pg-vcv3 |