GHSA-vvf2-ppj9-pp49HighCVSS 7.5

Inefficient Regular Expression Complexity in vuelidate

Published
September 20, 2021
Last Modified
January 30, 2023

🔗 CVE IDs covered (1)

📋 Description

vuelidate is a simple, lightweight model-based validation for Vue.js 2.x & 3.0. A ReDoS (regular expression denial of service) flaw was found in the @vuelidate/validators package. An attacker that is able to provide crafted input to the url(input) function may cause an application to consume an excessive amount of CPU.

🎯 Affected products1

  • npm/@vuelidate/validators:<= 2.0.0-alpha.21

🔗 References (4)