GHSA-v6wh-2wvh-c8x5

Suggest an improvement
Source
https://github.com/advisories/GHSA-v6wh-2wvh-c8x5
Import Source
https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/02/GHSA-v6wh-2wvh-c8x5/GHSA-v6wh-2wvh-c8x5.json
JSON Data
https://api.osv.dev/v1/vulns/GHSA-v6wh-2wvh-c8x5
Aliases
  • CVE-2020-7779
Published
2022-02-09T23:15:46Z
Modified
2023-11-08T04:04:10.094401Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
Regular Expression Denial of Service in djvalidator
Details

All versions of package djvalidator are vulnerable to Regular Expression Denial of Service (ReDoS) by sending crafted invalid emails - for example, --@------------------------------------------------------------------------------------------------------------------------!.

References

Affected packages

npm / djvalidator

Package

Affected ranges

Type
SEMVER
Events
Introduced
0Unknown introduced version / All previous versions are affected
Last affected
1.1.1