| Package | Affected versions | Patched versions |
|---|---|---|
| is-my-json-valid | ≥ 2.0.0, < 2.17.2< 1.4.1 | 2.17.21.4.1 |
| is-my-json-valid | ≥ 2.0.0, < 2.17.2< 1.4.1 | 2.17.21.4.1 |
It was discovered that the is-my-json-valid JavaScript library used an inefficient regular expression to validate JSON fields defined to have email format. A specially crafted JSON file could cause it to consume an excessive amount of CPU time when validated.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free