Description

All versions of package djvalidator are vulnerable to Regular Expression Denial of Service (ReDoS) by sending crafted invalid emails - for example, --@------------------------------------------------------------------------------------------------------------------------!.

Remediation

References

https://snyk.io/vuln/SNYK-JS-DJVALIDATOR-1018709

Related Vulnerabilities

CVE-2017-1000353 Vulnerability in maven package org.jenkins-ci.main:jenkins-core

CVE-2020-36649 Vulnerability in maven package org.webjars.bowergithub.mholt:papaparse

CVE-2020-35201 Vulnerability in maven package org.igniterealtime.openfire.plugins:bookmarks

CVE-2023-43499 Vulnerability in maven package com.sonyericsson.jenkins.plugins.bfa:build-failure-analyzer

CVE-2021-46708 Vulnerability in maven package org.webjars.bower:swagger-ui

Severity

High

Classification

CWE-400 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Tags

Exploit Third Party Advisory