npm/is-email CVE-2021-36716: high 7.5, EPSS 0.99%
Improper Input Validation in is-email
Action: Upgrade is-email to 1.0.1 or later.
npm i is-email@1.0.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.0.1 | - |
Fixed versions
| 1.0.1 |
Sources
- osv: GHSA-j377-2x76-558h
- https://nvd.nist.gov/vuln/detail/CVE-2021-36716
- https://github.com/segmentio/is-email
- https://github.com/segmentio/is-email/releases
- https://segment.com/docs/release_notes/2021-07-13-cve-2021-36716
CVE-2021-36716 · published · modified · JSON