Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2021-60552
HistoryJul 15, 2021 - 12:00 a.m.

Segment is-email input validation error vulnerability

2021-07-1500:00:00
China National Vulnerability Database
www.cnvd.org.cn
9

0.001 Low

EPSS

Percentile

45.6%

is-email is an application used to validate email addresses. Segment is-email is vulnerable due to a ReDoS (regular expression denial of service) flaw discovered in Node.js prior to Segment is-email package 1.0.1. An attacker could exploit this flaw to cause the application to consume excessive CPU.

CPENameOperatorVersion
segment is-emaillt1.0.1

0.001 Low

EPSS

Percentile

45.6%