Skip to content
OpenAdvisories
Medium · 6.5 CVE-2021-32816 EUVD-2021-19566GHSA-h97j-5ccr-wj2x

Regular expression Denial of Service in ProtonMail

Published May 14, 2021 · Updated Aug 3, 2024 · Assigned by GitHub_M

Description

ProtonMail Web Client is the official AngularJS web client for the ProtonMail secure email service. ProtonMail Web Client before version 3.16.60 has a regular expression denial-of-service vulnerability. This was fixed in commit 6687fb. There is a full report available in the referenced GHSL-2021-027.

Affected products

VendorProductAffectedFixed
ProtonMail WebClient < 3.16.60 —

References