GHSA-xx4c-jj58-r7x6
Suggest an improvement- Source
- https://github.com/advisories/GHSA-xx4c-jj58-r7x6
- Import Source
- https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2021/11/GHSA-xx4c-jj58-r7x6/GHSA-xx4c-jj58-r7x6.json
- JSON Data
- https://api.osv.dev/v1/vulns/GHSA-xx4c-jj58-r7x6
- Published
- 2021-11-19T20:14:23Z
- Modified
- 2022-07-12T00:11:53Z
- Severity
-
- 5.3 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVSS Calculator
- Summary
- Inefficient Regular Expression Complexity in Validator.js
- Details
-
Impact
Versions of
validatorprior to 13.7.0 are affected by an inefficient Regular Expression complexity when using thertrimandtrimsanitizers.Patches
The problem has been patched in validator 13.7.0
- References
-
- https://github.com/validatorjs/validator.js/security/advisories/GHSA-xx4c-jj58-r7x6
- https://nvd.nist.gov/vuln/detail/CVE-2021-3765
- https://github.com/validatorjs/validator.js/issues/1599
- https://github.com/validatorjs/validator.js/pull/1738
- https://github.com/validatorjs/validator.js
- https://huntr.dev/bounties/c37e975c-21a3-4c5f-9b57-04d63b28cfc9
Affected packages
npm / validator
Package
- Name
- validator
- View open source insights on deps.dev
- Purl
- pkg:npm/validator