Description
It was discovered that the is-my-json-valid JavaScript library used an inefficient regular expression to validate JSON fields defined to have email format. A specially crafted JSON file could cause it to consume an excessive amount of CPU time when validated.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | nodejs-is-my-json-valid | is-myjson-valid 2.17.2, is-myjson-valid 1.4.1 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | is-my-json-valid | >= 2.0.0, < 2.17.2 | 2.17.2 | GHSA-4hpf-3wq7-5rpr |
| npm | is-my-json-valid | < 1.4.1 | 1.4.1 | GHSA-4hpf-3wq7-5rpr |