GHSA-xx4c-jj58-r7x6
GHSA-xx4c-jj58-r7x6 · Inefficient Regular Expression Complexity in Validator.js
This page contains facts from public vulnerability sources. Check the original advisory before updating.
### Impact Versions of `validator` prior to 13.7.0 are affected by an inefficient Regular Expression complexity when using the `rtrim` and `trim` sanitizers. ### Patches The problem has been patched in validator 13.7.0
CVSS 5.3 · Medium · Fix available
- Published
- Updated
Stack: node
Affected products and versions
validator npm
- Affected ranges
- SEMVER: ≥ 11.1.0, < 13.7.0
Update to 13.7.0
Original sources
- https://github.com/validatorjs/validator.js/security/advisories/GHSA-xx4c-jj58-r7x6
- https://nvd.nist.gov/vuln/detail/CVE-2021-3765
- https://github.com/validatorjs/validator.js/issues/1599
- https://github.com/validatorjs/validator.js/pull/1738
- https://github.com/validatorjs/validator.js
- https://huntr.dev/bounties/c37e975c-21a3-4c5f-9b57-04d63b28cfc9
- https://osv.dev/vulnerability/GHSA-xx4c-jj58-r7x6