medium5.3
CVE-2020-7767
Regular expression deinal of service in express-validators
Impact
All versions of package express-validators are vulnerable to Regular Expression Denial of Service (ReDoS) when validating specifically-crafted invalid urls.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| npm | express-validators | <= 1.0.4 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Express-Validators Project | Express-Validators | All versions |