GHSA-c332-w4jm-55wv
Regular expression Denial of Service (ReDoS) in EmailValidator class in V7 compatibility module in Vaadin 8
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Maven | com.vaadin:vaadin-compatibility-server | >= 8.0.0, < 8.13.0 | 8.13.0 |
Details
As written in the advisory (Markdown source, shown as plain text).
Unsafe validation RegEx in `EmailValidator` component in `com.vaadin:vaadin-compatibility-server` versions 8.0.0 through 8.12.4 (Vaadin versions 8.0.0 through 8.12.4) allows attackers to cause uncontrolled resource consumption by submitting malicious email addresses.
References
External links from the advisory. They lead to third-party sites.