This affects the package npm-user-validate before 1.0.1. The regex that validates user emails took exponentially longer to process long input strings beginning with @ characters.

This affects the package npm-user-validate before 1.0.1. The regex that validates user emails took exponentially longer to process long input strings beginning with @ characters.

Regular expression denial of service in npm-user-validate

Уязвимость пакета npm-user-validate програмной платформы node.js, позволяющая нарушителю вызвать отказ в обслуживании

ELSA-2021-0549: nodejs:12 security update (MODERATE)

Moderate: nodejs:14 security and bug fix update

Moderate: nodejs:12 security update

ELSA-2021-0551: nodejs:14 security and bug fix update (MODERATE)

Moderate: nodejs:10 security update

ELSA-2021-0548: nodejs:10 security update (MODERATE)