GHSA-p27h-4cpf-fw48

email-existence Inefficient Regular Expression Complexity vulnerability

Source: GitHub Advisory Database (reviewed) High CVE-2018-25049

Packages

Ecosystem	Package	Affected	Fixed in
npm	email-existence	<= 0.1.6	no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

A vulnerability was found in email-existence. It has been rated as problematic. Affected by this issue is some unknown functionality of the file `index.js`. The manipulation leads to inefficient regular expression complexity. The name of the patch is 0029ba71b6ad0d8ec0baa2ecc6256d038bdd9b56. It is recommended to apply a patch to fix this issue. VDB-216854 is the identifier assigned to this vulnerability.

References

External links from the advisory. They lead to third-party sites.

https://nvd.nist.gov/vuln/detail/CVE-2018-25049 advisory
https://github.com/nmanousos/email-existence/pull/37 web
https://github.com/nmanousos/email-existence/commit/0029ba71b6ad0d8ec0baa2ecc6256d038bdd9b56 web
https://github.com/nmanousos/email-existence package
https://vuldb.com/?ctiid.216854 web
https://vuldb.com/?id.216854 web