Skip to content

Commit 8a74c89

Browse files
committed
DOC-247 add note [netlify-ignore]
1 parent bded34f commit 8a74c89

File tree

1 file changed

+15
-0
lines changed

1 file changed

+15
-0
lines changed
Lines changed: 15 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,15 @@
1+
---
2+
title: CVE-2021-36716 - A ReDoS (Regular Expression Denial of Service)
3+
description: |
4+
A ReDoS (Regular Expression Denial of Service) flaw was identified within the segment “is-email” package prior to version 1.0.1 for Node.js and web browsers as client side code.
5+
6+
An Attacker that can provide crafted input to the `isEmail(input)` function may cause an application to consume an excessive amount of CPU.
7+
8+
Credit to Yeting Li for identifying and reporting the vulnerability to Segment.
9+
10+
The latest version of “is-email” is available in the [segmentio/is-email repository](https://github.com/segmentio/is-email).
11+
release_type: patch
12+
product_area: package
13+
business: false
14+
team: false
15+
---

0 commit comments

Comments
 (0)