GHSA-xx4c-jj58-r7x6

Suggest an improvement
Source
https://github.com/advisories/GHSA-xx4c-jj58-r7x6
Import Source
https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2021/11/GHSA-xx4c-jj58-r7x6/GHSA-xx4c-jj58-r7x6.json
JSON Data
https://api.osv.dev/v1/vulns/GHSA-xx4c-jj58-r7x6
Downstream
Published
2021-11-19T20:14:23Z
Modified
2022-07-12T00:11:53Z
Severity
  • 5.3 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVSS Calculator
Summary
Inefficient Regular Expression Complexity in Validator.js
Details

Impact

Versions of validator prior to 13.7.0 are affected by an inefficient Regular Expression complexity when using the rtrim and trim sanitizers.

Patches

The problem has been patched in validator 13.7.0

Database specific 
{
    "cwe_ids":  [
        "CWE-1333"
    ],
    "github_reviewed":  true,
    "github_reviewed_at":  "2021-11-08T21:27:48Z",
    "nvd_published_at":  null,
    "severity":  "MODERATE"
}
References

Affected packages

npm / validator

Package

Name
validator
View open source insights on deps.dev
Purl
pkg:npm/validator

Affected ranges

Type
SEMVER
Events
Introduced
11.1.0
Fixed
13.7.0

Database specific

source 
"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2021/11/GHSA-xx4c-jj58-r7x6/GHSA-xx4c-jj58-r7x6.json"