medium5.3
CVE-2020-7761
Regular expression denial of service in @absolunet/kafe
Impact
This affects the package @absolunet/kafe before 3.2.10. It allows cause a denial of service when validating crafted invalid emails.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| npm | @absolunet/kafe | < 3.2.10 | 3.2.10 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Absolunet | Kafe | before 3.2.10 |
Weakness classification
References
- NVD record
- CVE.org record
- GitHub advisory
- https://github.com/absolunet/kafe/commit/c644c798bfcdc1b0bbb1f0ca59e2e2664ff3fdd0%23diff-f0f4b5b19ad46588ae9d7dc1889f681252b0698a4ead3a77b7c7d127ee657857
- https://snyk.io/vuln/SNYK-JS-ABSOLUNETKAFE-1017403
- https://github.com/advisories/GHSA-hgpf-97c5-74fc
- https://nvd.nist.gov/vuln/detail/CVE-2020-7761
- https://www.npmjs.com/package/@absolunet/kafe