~ / search / GHSA-c56f-grv3-gpfr

GHSA-c56f-grv3-gpfr

Regular expression denial of service in forms

Source: GitHub Advisory Database (reviewed) Moderate CVE-2021-23388

Packages

EcosystemPackageAffectedFixed in
npm forms < 1.3.2 1.3.2

Details

As written in the advisory (Markdown source, shown as plain text).

The package forms before 1.3.2 are vulnerable to Regular Expression Denial of Service (ReDoS) via email validation.

References

External links from the advisory. They lead to third-party sites.