Regular Expression Denial of Service in is-my-json-valid (GHSA-f522-ffg8-j8r6)
Published: 2017-10-24T18:33:35Z
Aliases: CVE-2016-2537
Severity: HIGH · CWE: CWE-1333

Version of `is-my-json-valid` before 1.4.1 or 2.17.2 are vulnerable to regular expression denial of service (ReDoS) via the email validation function.


## Recommendation

Update to version 1.4.1, 2.17.2 or later.

Affected packages:
package: ecosystem: npm
name: is-my-json-valid
ranges: type: ECOSYSTEM
events: introduced: 2.0.0
fixed: 2.17.2
package: ecosystem: npm
name: is-my-json-valid
ranges: type: ECOSYSTEM
events: introduced: 0
fixed: 1.4.1