Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2021-32816

Regular expression Denial of Service in ProtonMail

Description

ProtonMail Web Client is the official AngularJS web client for the ProtonMail secure email service. ProtonMail Web Client before version 3.16.60 has a regular expression denial-of-service vulnerability. This was fixed in commit 6687fb. There is a full report available in the referenced GHSL-2021-027.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ProtonMail WebClient

  • < 3.16.60affected

References