Vulnerability "Inefficient Regular Expression Complexity in validator.js"
See original GitHub issueWhich service(blob, file, queue, table) does this issue concern?
Vulnerability is found in validator dependency
Which version of the SDK was used?
2.10.5
What’s the Node.js/Browser version?
6.14.6
What problem was encountered?
npm audit
finds vulnerability “Inefficient Regular Expression Complexity in validator.js” https://github.com/advisories/GHSA-qgmg-gppg-76g5
Steps to reproduce the issue?
npm audit
Have you found a mitigation/solution?
PR https://github.com/Azure/azure-storage-node/pull/699 has been created by dependabot
Issue Analytics
- State:
- Created 2 years ago
- Reactions:10
- Comments:9
Top Results From Across the Web
Inefficient Regular Expression Complexity in validator.js - GitHub
Inefficient Regular Expression Complexity in validator.js ... validator.js prior to 13.7.0 is vulnerable to Inefficient Regular Expression ...
Read more >Inefficient Regular Expression Complexity in validatorjs ...
I would like to report a Regular Expression Denial of Service (ReDoS) vulnerability in validator. It allows cause a denial of service when ......
Read more >Inefficient Regular Expression Complexity in ... - Vulners
Description. validator.js prior to 13.7.0 is vulnerable to Inefficient Regular Expression Complexity. Affected Software. CPE Name, Name, Version ...
Read more >Vulnerability Details : CVE-2021-3765
CVE-2021-3765 : validator.js is vulnerable to Inefficient Regular Expression Complexity.
Read more >CWE-1333: Inefficient Regular Expression Complexity (4.9)
CWE-1333: Inefficient Regular Expression Complexity · The number of possible backtracking attempts are exponential relative to the length of the input. · The ......
Read more >Top Related Medium Post
No results found
Top Related StackOverflow Question
No results found
Troubleshoot Live Code
Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start FreeTop Related Reddit Thread
No results found
Top Related Hackernoon Post
No results found
Top Related Tweet
No results found
Top Related Dev.to Post
No results found
Top Related Hashnode Post
No results found
Top GitHub Comments
Hi @DmitriyKirakosyan ,
We are preparing for the release, should be able to release it in the next week.
Thanks Emma
This is impacting our npm audits as well. Would love to see this merged and published. 🙏