Regular Expression Denial of Service in djvalidator

2022-02-0923:15:46

CWE-400

GitHub Advisory Database

github.com

0.001 Low

EPSS

Percentile

45.1%

JSON

All versions of package djvalidator are vulnerable to Regular Expression Denial of Service (ReDoS) by sending crafted invalid emails - for example,
--@------------------------------------------------------------------------------------------------------------------------!.

CPENameOperatorVersion
djvalidatorle1.1.1

CPE	Name	Operator	Version
	djvalidator	le	1.1.1

References

github.com/advisories/GHSA-v6wh-2wvh-c8x5

nvd.nist.gov/vuln/detail/CVE-2020-7779

snyk.io/vuln/SNYK-JS-DJVALIDATOR-1018709

0.001 Low

EPSS

Percentile

45.1%

JSON

Related for GHSA-V6WH-2WVH-C8X5