CVE-2020-7754
Regular Expression Denial of Service (ReDoS)
This affects the package npm-user-validate before 1.0.1. The regex that validates user emails took exponentially longer to process long input strings beginning with @ characters.
CVSS 3.1 · 7.5 High
EPSS 3.3%
KEV · Not listed
Vendors
Products