Description
All versions of package express-validators are vulnerable to Regular Expression Denial of Service (ReDoS) when validating specifically-crafted invalid urls.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | express-validators | < unspecified | unspecified |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | express-validators | <= 1.0.4 | — | GHSA-cf2x-rqc8-grfq |