VULNERABILITY INTELLIGENCE

CVE-2021-36716

CVSS score7.5 HIGH
EPSS probability0.99%
CISA KEVNot currently listed
Published2021-07-14
Last modified2026-06-17

Description

A ReDoS (regular expression denial of service) flaw was found in the Segment is-email package before 1.0.1 for Node.js. An attacker that is able to provide crafted input to the isEmail(input) function may cause an application to consume an excessive amount of CPU.