high7.5
CVE-2021-3794
Inefficient Regular Expression Complexity in vuelidate
Impact
vuelidate is a simple, lightweight model-based validation for Vue.js 2.x & 3.0. A ReDoS (regular expression denial of service) flaw was found in the `@vuelidate/validators` package. An attacker that is able to provide crafted input to the url(input) function may cause an application to consume an excessive amount of CPU.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| npm | @vuelidate/validators | <= 2.0.0-alpha.21 | 2.0.0-alpha.22 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Vuelidate Project | Vuelidate | before 0.7.7 Versions 1.0.0, 2.0.0 |