What is GHSA-hgpf-97c5-74fc?

GHSA-hgpf-97c5-74fc is a security advisory published by GitHub Security Advisories with Medium severity. Regular expression denial of service in @absolunet/kafe

Which CVE IDs does GHSA-hgpf-97c5-74fc cover?

GHSA-hgpf-97c5-74fc covers the following CVE IDs: CVE-2020-7761. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-hgpf-97c5-74fc?

GHSA-hgpf-97c5-74fc has a CVSS v3 base score of 5.3, published by GitHub Security Advisories.

Which products are affected by GHSA-hgpf-97c5-74fc?

GHSA-hgpf-97c5-74fc affects 1 product, including: npm/@absolunet/kafe:\u003c 3.2.10.

GHSA-hgpf-97c5-74fcMediumCVSS 5.3

Regular expression denial of service in @absolunet/kafe

Vendor

GitHub Security Advisories

Published

May 10, 2021

Last Modified

February 1, 2023

🔗 CVE IDs covered (1)

CVE-2020-7761 →

📋 Description

This affects the package @absolunet/kafe before 3.2.10. It allows cause a denial of service when validating crafted invalid emails.

🎯 Affected products1

npm/@absolunet/kafe:< 3.2.10

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2020-7761
https://github.com/absolunet/kafe/commit/c644c798bfcdc1b0bbb1f0ca59e2e2664ff3fdd0%23diff-f0f4b5b19ad46588ae9d7dc1889f681252b0698a4ead3a77b7c7d127ee657857
https://snyk.io/vuln/SNYK-JS-ABSOLUNETKAFE-1017403
https://www.npmjs.com/package/@absolunet/kafe
https://github.com/advisories/GHSA-hgpf-97c5-74fc