Open actionable advisories and recorded vendor fixes. This public package view has no inventory attached and cannot establish whether your deployment is affected. A vendor fix never resolves your finding; verify your installed version and the source guidance.
Open advisories
2 actionable advisories, newest first. Withdrawn advisories and news are excluded. Coverage is partial.
It was discovered that the is-my-json-valid JavaScript library used an inefficient regular expression to validate JSON fields defined to have email format. A specially crafted JSON file could cause it to consume an excessive amount of CPU time when validated.
Recommended action: Upgrade to 2.17.2 or 1.4.1 by release line, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.
Version of is-my-json-valid before 2.12.4 are vulnerable to regular expression denial of service (ReDoS) via the email validation function. Recommendation Update to version 2.12.4 or later.
Recommended action: Upgrade to 2.12.4 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.