Description

All versions of package express-validators are vulnerable to Regular Expression Denial of Service (ReDoS) when validating specifically-crafted invalid urls.

Remediation

References

https://snyk.io/vuln/SNYK-JS-EXPRESSVALIDATORS-1017404

Related Vulnerabilities

CVE-2019-17558 Vulnerability in maven package org.apache.solr:solr-velocity

CVE-2020-7787 Vulnerability in npm package react-adal

CVE-2022-1233 Vulnerability in maven package org.webjars.npm:urijs

CVE-2021-23326 Vulnerability in npm package @graphql-tools/git-loader

CVE-2020-7598 Vulnerability in npm package minimist

Severity

Critical

Classification

CWE-400

Tags

Exploit Third Party Advisory