Description
All versions of package djvalidator are vulnerable to Regular Expression Denial of Service (ReDoS) by sending crafted invalid emails - for example, --@------------------------------------------------------------------------------------------------------------------------!.
Recommendation
No fix is available yet. Followings are affected versions:
- <= 1.1.1
References
Could your website be exposed too?
SmartScanner can check your website for Regular Expression Denial of Service in djvalidator and gives you actionable findings to investigate.
Start a free scanRelated Issues
- Regular Expression Denial of Service (ReDoS) in lodash - CVE-2020-28500
- Knwl.js Regular Expression Denial of Service vulnerability - CVE-2020-26306
- Regular Expression Denial of Service in papaparse - CVE-2020-36649
- CommonRegexJS Regular Expression Denial of Service vulnerability - CVE-2020-26305
You might also like:
See something that needs correcting? Let us knowUpdated September 11, 2023