Vulnerabilities > CVE-2020-7754 - Unspecified vulnerability in Npmjs Npm-User-Validate

CVSS 0.0 - NONE

Attack vector

UNKNOWN

Attack complexity

UNKNOWN

Privileges required

UNKNOWN

Confidentiality impact

UNKNOWN

Integrity impact

UNKNOWN

Availability impact

UNKNOWN

npmjs

NVD

Published: 2020-10-27

Updated: 2024-11-21

Summary

This affects the package npm-user-validate before 1.0.1. The regex that validates user emails took exponentially longer to process long input strings beginning with @ characters.

Vulnerable Configurations

Part	Description	Count
Application	Npmjs Npmjs NPM User Validate 0.0.4 Npmjs NPM User Validate 0.1.0 Npmjs NPM User Validate 0.1.1 Npmjs NPM User Validate 0.1.2 Npmjs NPM User Validate 0.1.3 Npmjs NPM User Validate 0.1.4 Npmjs NPM User Validate 0.1.5 Npmjs NPM User Validate 1.0.0	8

References

https://github.com/npm/npm-user-validate/commit/c8a87dac1a4cc6988b5418f30411a8669bef204e
https://github.com/npm/npm-user-validate/commit/c8a87dac1a4cc6988b5418f30411a8669bef204e
https://github.com/npm/npm-user-validate/security/advisories/GHSA-xgh6-85xh-479p
https://github.com/npm/npm-user-validate/security/advisories/GHSA-xgh6-85xh-479p
https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1019353
https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1019353
https://snyk.io/vuln/SNYK-JS-NPMUSERVALIDATE-1019352
https://snyk.io/vuln/SNYK-JS-NPMUSERVALIDATE-1019352