GHSA-xx4c-jj58-r7x6
GHSA-xx4c-jj58-r7x6 · Inefficient Regular Expression Complexity in Validator.js
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
### Impact Versions of `validator` prior to 13.7.0 are affected by an inefficient Regular Expression complexity when using the `rtrim` and `trim` sanitizers. ### Patches The problem has been patched in validator 13.7.0
CVSS 5.3 · Media · Corrección disponible
- Publicación
- Actualización
Pila tecnológica: node
Productos y versiones afectados
validator npm
- Intervalos de versiones afectados
- SEMVER: ≥ 11.1.0, < 13.7.0
Actualiza a 13.7.0
Fuentes originales
- https://github.com/validatorjs/validator.js/security/advisories/GHSA-xx4c-jj58-r7x6
- https://nvd.nist.gov/vuln/detail/CVE-2021-3765
- https://github.com/validatorjs/validator.js/issues/1599
- https://github.com/validatorjs/validator.js/pull/1738
- https://github.com/validatorjs/validator.js
- https://huntr.dev/bounties/c37e975c-21a3-4c5f-9b57-04d63b28cfc9
- https://osv.dev/vulnerability/GHSA-xx4c-jj58-r7x6