What is GHSA-p27h-4cpf-fw48?

GHSA-p27h-4cpf-fw48 is a security advisory published by GitHub Security Advisories with High severity. email-existence Inefficient Regular Expression Complexity vulnerability

Which CVE IDs does GHSA-p27h-4cpf-fw48 cover?

GHSA-p27h-4cpf-fw48 covers the following CVE IDs: CVE-2018-25049. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-p27h-4cpf-fw48?

GHSA-p27h-4cpf-fw48 has a CVSS v3 base score of 7.5, published by GitHub Security Advisories.

Which products are affected by GHSA-p27h-4cpf-fw48?

GHSA-p27h-4cpf-fw48 affects 1 product, including: npm/email-existence:\u003c= 0.1.6.

GHSA-p27h-4cpf-fw48HighCVSS 7.5

email-existence Inefficient Regular Expression Complexity vulnerability

Vendor

GitHub Security Advisories

Published

December 27, 2022

Last Modified

February 3, 2023

🔗 CVE IDs covered (1)

CVE-2018-25049 →

📋 Description

A vulnerability was found in email-existence. It has been rated as problematic. Affected by this issue is some unknown functionality of the file index.js. The manipulation leads to inefficient regular expression complexity. The name of the patch is 0029ba71b6ad0d8ec0baa2ecc6256d038bdd9b56. It is recommended to apply a patch to fix this issue. VDB-216854 is the identifier assigned to this vulnerability.

🎯 Affected products1

npm/email-existence:<= 0.1.6

🔗 References (6)

https://nvd.nist.gov/vuln/detail/CVE-2018-25049
https://github.com/nmanousos/email-existence/pull/37
https://github.com/nmanousos/email-existence/commit/0029ba71b6ad0d8ec0baa2ecc6256d038bdd9b56
https://vuldb.com/?ctiid.216854
https://vuldb.com/?id.216854
https://github.com/advisories/GHSA-p27h-4cpf-fw48