Description
Unsafe validation RegEx in EmailValidator component in com.vaadin:vaadin-compatibility-server versions 8.0.0 through 8.12.4 (Vaadin versions 8.0.0 through 8.12.4) allows attackers to cause uncontrolled resource consumption by submitting malicious email addresses.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Vaadin | Vaadin | 8.0.0 | — |
| Vaadin | vaadin-compatibility-server | 8.0.0 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | com.vaadin:vaadin-compatibility-server | >= 8.0.0, < 8.13.0 | 8.13.0 | GHSA-c332-w4jm-55wv |