This affects the package npm-user-validate before 1.0.1. The regex that validates user emails took exponentially longer to process long input strings beginning with @ characters.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade nodejs-nodemonUpgrade nodejs-packaging | May 4, 2022 | Oct 27, 2020 |
| Centos_linux | — | Upgrade nodejs-nodemonUpgrade npmUpgrade nodejs-full-i18nUpgrade nodejs-packagingUpgrade nodejs-develUpgrade nodejsUpgrade nodejs-docsUpgrade nodejs-debuginfoUpgrade nodejs-debugsource | Feb 17, 2021 | Oct 27, 2020 |
| Oracle_linux | — | Upgrade nodejs-docsUpgrade nodejs-nodemonUpgrade nodejs-packagingUpgrade nodejs-develUpgrade nodejsUpgrade npmUpgrade nodejs-full-i18n | Feb 20, 2021 | Oct 16, 2020 |
| Redhat_linux | — | Upgrade nodejs-debugsourceUpgrade nodejs-packagingUpgrade nodejsUpgrade nodejs-debuginfoUpgrade nodejs-develUpgrade nodejs-docsUpgrade nodejs-nodemonUpgrade nodejs-full-i18nUpgrade npm | Feb 17, 2021 | Oct 27, 2020 |
| Rocky_linux | — | — | Aug 15, 2024 | Oct 27, 2020 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub