-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI
DartDartMiggo AIRoot Cause AnalysisThe vulnerability stems from an insufficient regular expression pattern in the validation logic. The core function responsible for validation (Personnummer.valid) likely contained a regex pattern that accepted '000' as the first three digits in the last four-digit group of a personnummer. This matches the described vulnerability where numbers ending with '000x' were improperly validated as legitimate. The workaround and patch both focus on correcting this specific regex pattern, indicating the validation function itself was the primary vulnerable component.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| personnummer | pub | < 3.0.3 | 3.0.3 |
Ongoing coverage of React2Shell