Skip to content
OpenAdvisories
Medium · 5.3 CVE-2021-23388 EUVD-2021-1307GHSA-c56f-grv3-gpfrSNYK-JS-FORMS-1296389

Regular Expression Denial of Service (ReDoS)

Published May 31, 2021 · Updated Sep 17, 2024 · Assigned by snyk

Package: forms Ecosystem: npm

Description

The package forms before 1.2.1, from 1.3.0 and before 1.3.2 are vulnerable to Regular Expression Denial of Service (ReDoS) via email validation.

Affected products

VendorProductAffectedFixed
— forms unspecified – < 1.2.1, 1.3.0 – < unspecified, unspecified – < 1.3.2 1.2.1

Affected packages

EcosystemPackageAffectedFixedRecord
npm forms < 1.3.2 1.3.2 GHSA-c56f-grv3-gpfr

References