Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2020-7754

Regular Expression Denial of Service (ReDoS)

Description

This affects the package npm-user-validate before 1.0.1. The regex that validates user emails took exponentially longer to process long input strings beginning with @ characters.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

n/a npm-user-validate

  • unspecified to < 1.0.1affected

References