Miggo Logo
Miggo Vulnerability Database
→
CVE-2020-7754

CVE-2020-7754:
Regular expression denial of service in npm-user-validate

7.5

CVSS Score
3.1

Basic Information

CVE ID
CVE-2020-7754
GHSA ID
GHSA-pw54-mh39-w3hc
EPSS Score
0.81063%
CWE
CWE-400
Published
5/10/2021
Updated
2/1/2023
KEV Status
No
Technology
TechnologyJavaScript

Technical Details

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Package NameEcosystemVulnerable VersionsFirst Patched Version
npm-user-validatenpm< 1.0.11.0.1

Vulnerability Intelligence
Miggo AIMiggo AI

Miggo AIRoot Cause Analysis:
In progress

WAF Protection Rules

WAF Rule

T*is *****ts t** p**k*** npm-us*r-v*li**t* ***or* *.*.*. T** r***x t**t v*li**t*s us*r *m*ils took *xpon*nti*lly lon**r to pro**ss lon* input strin*s ***innin* wit* @ ***r**t*rs.

Reasoning

No *n*lysis *v*il**l*