GitHub Advisoryadvisory · npm
GHSA-9242-6p36-6256 Inefficient Regular Expression Complexity in node-email-check
HIGH
Official page ↗
- Aliases
- CVE-2023-39619
- Ecosystem
- npm
- Packages
- node-email-check
- Severity
- High
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- Weaknesses
- CWE-1333
- Reviewed
- 2023-10-30
Affected packages
• npm node-email-check: <= 1.0.4 (no fix yet)
Description
ReDos in NPMJS Node Email Check v.1.0.4 allows an attacker to cause a denial of service via a crafted string to the scpSyntax component.
Related
Alias · CVE (1)
- CVE-2023-39619 ReDos in NPMJS Node Email Check v.1.0.4 allows an attacker to cause a denial of service via a crafted string to the scpSyntax component. vulnerability
Weakness · CWE (1)
- CWE-1333 Inefficient Regular Expression Complexity weakness