CVE-2018-1107

2021-03-3001:48:27

CWE-400

redhat

www.cve.org

cve-2018-1107

is-my-json-valid

javascript library

inefficient regular expression

json fields

email format

cpu time

AI Score

5.6

Confidence

High

EPSS

0.001

Percentile

45.7%

JSON

It was discovered that the is-my-json-valid JavaScript library used an inefficient regular expression to validate JSON fields defined to have email format. A specially crafted JSON file could cause it to consume an excessive amount of CPU time when validated.

CNA Affected

[
  {
    "product": "nodejs-is-my-json-valid",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "is-myjson-valid 2.17.2, is-myjson-valid 1.4.1"
      }
    ]
  }
]