CVE-2020-7754

Katalog CVE

CVSS 7.5 · High EPSS 3,5%

Kerentanan pada npmjs npm-user-validate. Skor CVSS 3.1 7.5 (High) menurut snyk.io.

Deskripsi (NVD)

This affects the package npm-user-validate before 1.0.1. The regex that validates user emails took exponentially longer to process long input strings beginning with @ characters.

Rincian

Terbit di NVD

27 Oktober 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.5 (High), sumber snyk.io
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

EPSS (30 hari)

3,5% peluang dieksploitasi; lebih tinggi dari 88,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/npm/npm-user-validate/commit/c8a87dac1a4cc6988b5418f30411a8669bef204e patch · advisory pihak ketiga
• https://github.com/npm/npm-user-validate/security/advisories/GHSA-xgh6-85xh-479p advisory pihak ketiga
• https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1019353 exploit · advisory pihak ketiga
• https://snyk.io/vuln/SNYK-JS-NPMUSERVALIDATE-1019352 exploit · advisory pihak ketiga