CVE-2020-7779

Name of the Vulnerable Software and Affected Versions djvalidator versions all

Description The issue is related to Regular Expression Denial of Service (ReDoS) in djvalidator. This occurs when crafted invalid emails are sent, such as --@------------------------------------------------------------------------------------------------------------------------!. The ReDoS vulnerability can be exploited by sending specially crafted input to the email validation function, causing a denial of service.

Recommendations For all versions, consider temporarily disabling the email validation function until a patch is available. Restrict access to the email validation module to minimize the risk of exploitation. Avoid using the email validation function with untrusted input until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.