Description

All versions of package djvalidator are vulnerable to Regular Expression Denial of Service (ReDoS) by sending crafted invalid emails - for example, --@------------------------------------------------------------------------------------------------------------------------!.

Remediation

References

https://snyk.io/vuln/SNYK-JS-DJVALIDATOR-1018709

Related Vulnerabilities

CVE-2018-19048 Vulnerability in maven package org.webjars:simditor

CVE-2022-24278 Vulnerability in npm package convert-svg-core

CVE-2022-33987 Vulnerability in maven package org.webjars.npm:got

CVE-2022-43670 Vulnerability in maven package org.apache.sling:org.apache.sling.cms

CVE-2023-20873 Vulnerability in maven package org.springframework.boot:spring-boot-actuator-autoconfigure

Severity

High

Classification

CWE-400 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Tags

Exploit Third Party Advisory