Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:36178
HistoryJun 28, 2022 - 6:52 a.m.

Regular Expression Denial Of Service (ReDoS)

2022-06-2806:52:38
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
15

0.001 Low

EPSS

Percentile

37.0%

regexfn is vulnerable to regular expression denial of service. The vulnerability exists in isEmail function in index.js because the emails are not properly validated with sufficient regular expression complexity which allows an attacker to send crafted invalid emails causing a denial of service.

0.001 Low

EPSS

Percentile

37.0%

Related for VERACODE:36178