CVE-2023-39619: Inefficient Regular Expression Complexity in node-email-check

October 25, 2023 (updated October 30, 2023)

ReDos in NPMJS Node Email Check v.1.0.4 allows an attacker to cause a denial of service via a crafted string to the scpSyntax component.

References

gist.github.com/6en6ar/712a4c1eab0324f15e09232c77ea08f8
github.com/advisories/GHSA-9242-6p36-6256
github.com/teomantuncer/node-email-check/issues/2
nvd.nist.gov/vuln/detail/CVE-2023-39619
www.npmjs.com/package/node-email-check

Code Behaviors & Features

Detect and mitigate CVE-2023-39619 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →