Lucene search
+L

1 matches found

nodejs
nodejs
added 2021/05/10 7:17 p.m.76 views

Regular Expression Denial of Service

Overview npm-user-validate before 1.0.1 is vulnerable to regular expression denial of service. The regex that validates user emails took exponentially longer to process long input strings beginning with @ characters. Recommendation Upgrade to version 1.0.1 or later References - CVE - GitHub Advis...

5CVSS4.9AI score0.03481EPSS
SaveExploits1Affected Software1
Rows per page
Query Builder