This affects the package npm-user-validate before 1.0.1. The regex that validates user emails took exponentially longer to process long input strings beginning with @ characters.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade nodejs-packagingUpgrade nodejs-nodemon | May 4, 2022 | Oct 27, 2020 |
| Centos_linux | — | Upgrade nodejs-full-i18nUpgrade npmUpgrade nodejs-packagingUpgrade nodejs-nodemonUpgrade nodejsUpgrade nodejs-debugsourceUpgrade nodejs-docsUpgrade nodejs-develUpgrade nodejs-debuginfo | Feb 17, 2021 | Oct 27, 2020 |
| Oracle_linux | — | Upgrade nodejs-full-i18nUpgrade npmUpgrade nodejsUpgrade nodejs-nodemonUpgrade nodejs-develUpgrade nodejs-docsUpgrade nodejs-packaging | Feb 20, 2021 | Oct 16, 2020 |
| Redhat_linux | — | Upgrade nodejs-docsUpgrade nodejs-debuginfoUpgrade nodejsUpgrade nodejs-develUpgrade nodejs-debugsourceUpgrade nodejs-packagingUpgrade npmUpgrade nodejs-nodemonUpgrade nodejs-full-i18n | Feb 17, 2021 | Oct 27, 2020 |
| Rocky_linux | — | — | Aug 15, 2024 | Oct 27, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub