CVE-2014-8882

CVE-2014-8882 · Regular Expression Denial of Service in validator

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Versions of `validator` prior to 3.22.1 are affected by a regular expression denial of service vulnerability in the `isURL` method. ## Recommendation Update to version 3.22.1 or later.

CVSS 7.5 · High · Fix available

Published: 2020-08-31T23:01:13Z
Updated: 2023-11-08T03:57:46.209770Z

Stack: node

Affected products and versions

validator npm
Affected ranges
- SEMVER: < 3.22.1
Update to 3.22.1

Original sources

https://nvd.nist.gov/vuln/detail/CVE-2014-8882
https://github.com/chriso/validator.js/issues/152#issuecomment-48107184
https://github.com/chriso/validator.js
https://snyk.io/vuln/npm:validator:20130705
https://www.npmjs.com/advisories/42
https://osv.dev/vulnerability/GHSA-f5w6-r7rg-mcgq

Check your server →

CVE-2014-8882 · Regular Expression Denial of Service in validator

Affected products and versions

validator npm

Original sources