Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:5840
HistoryFeb 23, 2018 - 2:03 a.m.

Regular Expression Denial Of Service (ReDoS)

2018-02-2302:03:40
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8

EPSS

0.001

Percentile

45.7%

is-my-json-valid is vulnerable to regular expression denial of service (ReDoS) attacks. A malicious user can pass a string through the email field to cause a ReDoS during email validation.

EPSS

0.001

Percentile

45.7%