github.com
https://github.com/vaadin/framework GHSA-JFMF-W293-8XR8
Regular expression Denial of Service (ReDoS) in EmailValidator class in V7 compatibility module in Vaadin 8
Description
Unsafe validation RegEx in `EmailValidator` component in `com.vaadin:vaadin-compatibility-server` versions 8.0.0 through 8.12.4 (Vaadin versions 8.0.0 through 8.12.4) allows attackers to cause uncontrolled resource consumption by submitting malicious email addresses.
Description source: GitHub Advisory
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
com.vaadin:vaadin-bomBrowse Maven / com.vaadin:vaadin-bom | GitHub Advisory | 8.0.0 to < 8.13.0 · Fixed in 8.13.0 | affected |
References
3github.com
https://github.com/vaadin/framework/security/advisories/GHSA-jfmf-w293-8xr8 vaadin.com
https://vaadin.com/security/cve-2021-31409