GHSA-p27h-4cpf-fw48

Source

https://github.com/advisories/GHSA-p27h-4cpf-fw48

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/12/GHSA-p27h-4cpf-fw48/GHSA-p27h-4cpf-fw48.json

JSON Data

https://api.osv.dev/v1/vulns/GHSA-p27h-4cpf-fw48

Aliases

CVE-2018-25049

Published

2022-12-27T09:30:41Z

Modified

2023-11-08T04:00:15.463717Z

Severity

7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator

Summary

email-existence Inefficient Regular Expression Complexity vulnerability

Details

A vulnerability was found in email-existence. It has been rated as problematic. Affected by this issue is some unknown functionality of the file index.js. The manipulation leads to inefficient regular expression complexity. The name of the patch is 0029ba71b6ad0d8ec0baa2ecc6256d038bdd9b56. It is recommended to apply a patch to fix this issue. VDB-216854 is the identifier assigned to this vulnerability.

Database specific

{
    "nvd_published_at": "2022-12-27T09:15:00Z",
    "github_reviewed_at": "2022-12-30T17:40:18Z",
    "severity": "HIGH",
    "github_reviewed": true,
    "cwe_ids": [
        "CWE-1333"
    ]
}

References

Affected packages

npm / email-existence

Package

Name: email-existence; View open source insights on deps.dev
Purl: pkg:npm/email-existence

Affected ranges

Type: SEMVER
Events: Introduced

0Unknown introduced version / All previous versions are affected

Last affected

0.1.6