Description

This affects the package @absolunet/kafe before 3.2.10. It allows cause a denial of service when validating crafted invalid emails.

Remediation

References

https://github.com/absolunet/kafe/commit/c644c798bfcdc1b0bbb1f0ca59e2e2664ff3fdd0%23diff-f0f4b5b19ad46588ae9d7dc1889f681252b0698a4ead3a77b7c7d127ee657857

https://snyk.io/vuln/SNYK-JS-ABSOLUNETKAFE-1017403

Related Vulnerabilities

CVE-2022-45388 Vulnerability in maven package net.praqma:config-rotator

CVE-2020-7747 Vulnerability in npm package lightning-server

CVE-2023-20861 Vulnerability in maven package org.springframework:spring-expression

CVE-2013-2251 Vulnerability in maven package org.apache.struts:struts2-core

CVE-2020-7712 Vulnerability in npm package json

Severity

Critical

Tags

Broken Link NVD-CWE-noinfo