7.5
High
CVE-2020-7754 This affects the package npm-user-validate before 1.0.1
Description
This affects the package npm-user-validate before 1.0.1. The regex that validates user emails took exponentially longer to process long input strings beginning with @ characters.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| npm-user-validate 1.0 | earliest → < 1.0.1 | 1.0.1 |