GHSA-xx4c-jj58-r7x6
GHSA-xx4c-jj58-r7x6 · Inefficient Regular Expression Complexity in Validator.js
Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.
### Impact Versions of `validator` prior to 13.7.0 are affected by an inefficient Regular Expression complexity when using the `rtrim` and `trim` sanitizers. ### Patches The problem has been patched in validator 13.7.0
CVSS 5.3 · Moyenne · Correctif disponible
- Publication
- Mise à jour
Pile logicielle: node
Produits et versions concernés
validator npm
- Plages de versions concernées
- SEMVER: ≥ 11.1.0, < 13.7.0
Mettez à jour vers 13.7.0
Sources originales
- https://github.com/validatorjs/validator.js/security/advisories/GHSA-xx4c-jj58-r7x6
- https://nvd.nist.gov/vuln/detail/CVE-2021-3765
- https://github.com/validatorjs/validator.js/issues/1599
- https://github.com/validatorjs/validator.js/pull/1738
- https://github.com/validatorjs/validator.js
- https://huntr.dev/bounties/c37e975c-21a3-4c5f-9b57-04d63b28cfc9
- https://osv.dev/vulnerability/GHSA-xx4c-jj58-r7x6