high7.5
CVE-2020-7779
Regular Expression Denial of Service in djvalidator
Impact
All versions of package djvalidator are vulnerable to Regular Expression Denial of Service (ReDoS) by sending crafted invalid emails - for example, `--@------------------------------------------------------------------------------------------------------------------------!`.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| npm | djvalidator | <= 1.1.1 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Djvalidator Project | Djvalidator | All versions |