GHSA-vvf2-ppj9-pp49HighCVSS 7.5
Inefficient Regular Expression Complexity in vuelidate
🔗 CVE IDs covered (1)
📋 Description
vuelidate is a simple, lightweight model-based validation for Vue.js 2.x & 3.0. A ReDoS (regular expression denial of service) flaw was found in the @vuelidate/validators package. An attacker that is able to provide crafted input to the url(input) function may cause an application to consume an excessive amount of CPU.
🎯 Affected products1
- npm/@vuelidate/validators:<= 2.0.0-alpha.21