7.5
Élevée
CVE-2020-7754 This affects the package npm-user-validate before 1.0.1
Description
This affects the package npm-user-validate before 1.0.1. The regex that validates user emails took exponentially longer to process long input strings beginning with @ characters.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| npm-user-validate 1.0 | premières → < 1.0.1 | 1.0.1 |