Improper Input Validation in is-email

2021-12-1017:25:21

Google

osv.dev

improper input validation

redos flaw

is-email package

node.js

cpu consumption

crafted input

software

EPSS

0.001

Percentile

45.6%

JSON

is-email helps validate an email address. A ReDoS (regular expression denial of service) flaw was found in the Segment is-email package before 1.0.1 for Node.js. An attacker that is able to provide crafted input to the isEmail(input) function may cause an application to consume an excessive amount of CPU.