CVE-2021-31405

Name of the Vulnerable Software and Affected Versions com.vaadin:vaadin-text-field-flow versions 2.0.4 through 2.3.2 com.vaadin:vaadin-text-field-flow versions 3.0.0 through 4.0.2

Description The issue is related to an unsafe validation RegEx in the EmailField component, which allows attackers to cause uncontrolled resource consumption by submitting malicious email addresses.

Recommendations For versions 2.0.4 through 2.3.2, update to a version outside of this range to resolve the issue. For versions 3.0.0 through 4.0.2, update to a version outside of this range to resolve the issue. As a temporary workaround, consider restricting the input to the EmailField component to prevent malicious email addresses from being submitted.