CVE-2021-36716

A ReDoS (regular expression denial of service) flaw was found in the Segment is-email package before 1.0.1 for Node.js

published July 14, 2021

CVSS
—
EPSS
1%
Percentile
62.2
In the wild
Unconfirmed
What it is

A ReDoS (regular expression denial of service) flaw was found in the Segment is-email package before 1.0.1 for Node.js. An attacker that is able to provide crafted input to the isEmail(input) function may cause an application to consume an excessive amount of CPU.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00990 · 62.2th percentile
Published
2021-07-14T15:37Z
EPSS history
Timeline
  • 14 JUL 15:37Z
    A ReDoS (regular expression denial of service) flaw was found in the Segment is-email package before 1.0.1 for Node.js
    cvelistv5