VULNERABILITY INTELLIGENCE

CVE-2020-7754

CVSS score7.5 HIGH

EPSS probability3.48%

CISA KEVNot currently listed

Published2020-10-27

Last modified2026-06-17

Description

This affects the package npm-user-validate before 1.0.1. The regex that validates user emails took exponentially longer to process long input strings beginning with @ characters.