Regular Expression Denial of Service in djvalidator

2022-02-0923:15:46

Google

osv.dev

0.001 Low

EPSS

Percentile

45.3%

JSON

All versions of package djvalidator are vulnerable to Regular Expression Denial of Service (ReDoS) by sending crafted invalid emails - for example,
--@------------------------------------------------------------------------------------------------------------------------!.

CPENameOperatorVersion
djvalidatorle1.1.1

CPE	Name	Operator	Version
	djvalidator	le	1.1.1

References

nvd.nist.gov/vuln/detail/CVE-2020-7779

snyk.io/vuln/SNYK-JS-DJVALIDATOR-1018709

0.001 Low

EPSS

Percentile

45.3%

JSON

Related for OSV:GHSA-V6WH-2WVH-C8X5