Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2020-7767

Regular Expression Denial of Service (ReDoS)

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
snyk

Description

All versions of package express-validators are vulnerable to Regular Expression Denial of Service (ReDoS) when validating specifically-crafted invalid urls.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

n/a express-validators

  • 0 to < unspecifiedaffected

References