CVE-2022-35923

v8n is a javascript validation library. Versions of v8n prior to 1.5.1 were found to have an inefficient regular expression complexity in the lowercase and uppercase regex which could lead to a denial of service attack. In testing of the lowercase function a payload of 'a' + 'a'.repeati + 'A' wit...

@magicfinn/gatsby-theme-finn-default (>=1.0.0, <=2.0.40), @panstav/ozen-dashboard-shared (>=0.0.2, <=0.0.7) potentially affected by CVE-2022-35923 via v8n (>=1.2.3, <=1.3.3)

v8n NPM version =1.2.3, =1.0.0, =0.0.2, =0.0.7 Source cves: CVE-2022-35923 Source advisory: OSV:GHSA-XRX9-GJ26-5WX9...

CVE-2022-35923 Inefficient Regular Expression Complexity in v8n

v8n is a javascript validation library. Versions of v8n prior to 1.5.1 were found to have an inefficient regular expression complexity in the lowercase and uppercase regex which could lead to a denial of service attack. In testing of the lowercase function a payload of 'a' + 'a'.repeati + 'A' wit...

CVE-2022-35923 Inefficient Regular Expression Complexity in v8n

v8n is a javascript validation library. Versions of v8n prior to 1.5.1 were found to have an inefficient regular expression complexity in the lowercase and uppercase regex which could lead to a denial of service attack. In testing of the lowercase function a payload of 'a' + 'a'.repeati + 'A' wit...

CVE-2022-35923

CVE-2022-35923 affects the v8n JavaScript validation library. Versions prior to 1.5.1 have inefficient regular expressions in the lowercase() and uppercase() functions, which can cause a denial-of-service via crafted input (e.g., a payload of 'a' + 'a'.repeat(i) + 'A'). Tests reported around 32 l...