Description

validator.js is vulnerable to Inefficient Regular Expression Complexity

Remediation

References

https://github.com/validatorjs/validator.js/commit/496fc8b2a7f5997acaaec33cc44d0b8dba5fb5e1

https://huntr.dev/bounties/c37e975c-21a3-4c5f-9b57-04d63b28cfc9

Related Vulnerabilities

CVE-2020-7696 Vulnerability in npm package react-native-fast-image

CVE-2021-3777 Vulnerability in npm package tmpl

CVE-2016-10735 Vulnerability in maven package fr.norad.bootstrap:bootstrap

CVE-2020-28446 Vulnerability in npm package ntesseract

CVE-2021-32702 Vulnerability in npm package nextjs-auth0

Severity

High

Classification

CWE-1333 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Tags

Patch Third Party Advisory Exploit Issue Tracking