Skip to content
OpenAdvisories
Medium · 5.3 CVE-2020-7779 EUVD-2022-1191GHSA-v6wh-2wvh-c8x5

Regular Expression Denial of Service (ReDoS)

Published Nov 26, 2020 · Updated Sep 16, 2024 · Assigned by snyk

Description

All versions of package djvalidator are vulnerable to Regular Expression Denial of Service (ReDoS) by sending crafted invalid emails - for example, --@------------------------------------------------------------------------------------------------------------------------!.

Affected products

VendorProductAffectedFixed
— djvalidator < unspecified unspecified

Affected packages

EcosystemPackageAffectedFixedRecord
npm djvalidator <= 1.1.1 — GHSA-v6wh-2wvh-c8x5

References