validatorjs/validator.js · Security
Inefficient Regular Expression Complexity in Validator.js
- GHSA ID
- GHSA-xx4c-jj58-r7x6
- Severity
- medium
- Published
- Updated
- CVSS
- 5.3 · CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
- CVSS v3
- 5.3 · CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Description
Impact
Versions of validator prior to 13.7.0 are affected by an inefficient Regular Expression complexity when using the rtrim and trim sanitizers.
Patches
The problem has been patched in validator 13.7.0
CWEs
- CWE-1333 · Inefficient Regular Expression Complexity
References
- https://github.com/validatorjs/validator.js/security/advisories/GHSA-xx4c-jj58-r7x6 ↗
- https://nvd.nist.gov/vuln/detail/CVE-2021-3765 ↗
- https://github.com/validatorjs/validator.js/issues/1599 ↗
- https://github.com/validatorjs/validator.js/pull/1738 ↗
- https://huntr.dev/bounties/c37e975c-21a3-4c5f-9b57-04d63b28cfc9/ ↗
- https://github.com/advisories/GHSA-xx4c-jj58-r7x6 ↗