GitHub Advisoryadvisory · npm
GHSA-xx4c-jj58-r7x6 Inefficient Regular Expression Complexity in Validator.js
MEDIUM
Official page ↗
- Ecosystem
- npm
- Packages
- validator
- Severity
- Moderate
- CVSS vector
- CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
- Weaknesses
- CWE-1333
- Reviewed
- 2021-11-08
Affected packages
• npm validator: >= 11.1.0, < 13.7.0 → fixed in 13.7.0
Description
Impact
Versions of `validator` prior to 13.7.0 are affected by an inefficient Regular Expression complexity when using the `rtrim` and `trim` sanitizers.
Patches
The problem has been patched in validator 13.7.0
Related
Weakness · CWE (1)
- CWE-1333 Inefficient Regular Expression Complexity weakness
References
- https://github.com/validatorjs/validator.js/security/advisories/GHSA-xx4c-jj58-r7x6 web
- https://nvd.nist.gov/vuln/detail/CVE-2021-3765 advisory
- https://github.com/validatorjs/validator.js/issues/1599 web
- https://github.com/validatorjs/validator.js/pull/1738 web
- https://github.com/validatorjs/validator.js package
- https://huntr.dev/bounties/c37e975c-21a3-4c5f-9b57-04d63b28cfc9 web