GitHub Advisoryadvisory · npm

GHSA-qgmg-gppg-76g5 Inefficient Regular Expression Complexity in validator.js

MEDIUM Published 2021-11-03 Modified 2021-11-03 Official page ↗

Aliases: CVE-2021-3765
Ecosystem: npm
Packages: validator
Severity: Moderate
CVSS vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Weaknesses: CWE-1333
Reviewed: 2021-11-03

Affected packages

• npm validator: < 13.7.0 → fixed in 13.7.0

Description

validator.js prior to 13.7.0 is vulnerable to Inefficient Regular Expression Complexity

Related

Alias · CVE (1)

CVE-2021-3765 validator.js is vulnerable to Inefficient Regular Expression Complexity vulnerability

Weakness · CWE (1)

CWE-1333 Inefficient Regular Expression Complexity weakness

References