Description

All versions of package djvalidator are vulnerable to Regular Expression Denial of Service (ReDoS) by sending crafted invalid emails - for example, --@------------------------------------------------------------------------------------------------------------------------!.

Remediation

References

https://snyk.io/vuln/SNYK-JS-DJVALIDATOR-1018709

Related Vulnerabilities

CVE-2020-7675 Vulnerability in npm package cd-messenger

CVE-2022-22984 Vulnerability in npm package @snyk/snyk-hex-plugin

CVE-2018-11698 Vulnerability in npm package node-sass

CVE-2018-3752 Vulnerability in npm package merge-options

CVE-2020-7687 Vulnerability in npm package fast-http

Severity

High

Classification

CWE-400 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Tags

Exploit Third Party Advisory