GHSA-rv73-9c8w-jp4c
validate.js Regular Expression Denial of Service vulnerability
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| npm | validate.js | <= 0.13.1 | no fix listed |
Details
As written in the advisory (Markdown source, shown as plain text).
Validate.js provides a declarative way of validating javascript objects. Versions 0.13.1 and prior contain one or more regular expressions that are vulnerable to Regular Expression Denial of Service (ReDoS). As of time of publication, no known patches are available.
References
External links from the advisory. They lead to third-party sites.