Search vulnerabilities

Results 1

Export CSV
CVE-2018-1107

nodejs-is-my-json-valid: ReDoS when validating JSON fields with email format

It was discovered that the is-my-json-valid JavaScript library used an inefficient regular expression to validate JSON fields defined to have email format. A specially crafted JSON file could cause it to consume an excessive amount of CPU time when validated.

CVSS 3.1 · 5.3 Medium EPSS 1.2% KEV · Not listed