CVE-2021-36716

Name of the Vulnerable Software and Affected Versions Segment is-email package versions prior to 1.0.1

Description A ReDoS (regular expression denial of service) flaw was found in the Segment is-email package for Node.js. An attacker able to provide crafted input to the isEmail(input) function may cause an application to consume an excessive amount of CPU. The issue is related to the validation of email addresses.

Recommendations For versions prior to 1.0.1, update to version 1.0.1 or later to resolve the issue. As a temporary workaround, consider restricting the use of the isEmail(input) function until a patch is available.