Inefficient Regular Expression Complexity in Validator.js - validator

Description

Versions of validator prior to 13.7.0 are affected by an inefficient Regular Expression complexity when using the rtrim and trim sanitizers.

Recommendation

Update the validator package to the latest compatible version. Followings are version details:

• Affected version(s): >= 11.1.0, < 13.7.0
• Patched version(s): 13.7.0

References

• GHSA-xx4c-jj58-r7x6
• huntr.dev
• CWE-1333

Related Issues

• string-kit Inefficient Regular Expression Complexity vulnerability - CVE-2021-4299
• skeemas Inefficient Regular Expression Complexity vulnerability - CVE-2018-25074
• is-url Inefficient Regular Expression Complexity vulnerability - CVE-2018-25079
• Vercel ms Inefficient Regular Expression Complexity vulnerability - CVE-2017-20162

You might also like:

How to Secure your NodeJs Express Javascript Application - part 1

How to Secure your NodeJs Express Javascript Application - part 2

10 Secure Coding Best Practices to Follow in Every Project

Tags:

npm

validator