{"action":"Upgrade com.vaadin:vaadin-compatibility-server to 8.13.0 or later.","affected":[{"fixed":"8.13.0","introduced":"8.0.0"}],"component":"com.vaadin:vaadin-compatibility-server","cve_ids":["CVE-2021-31409"],"ecosystem":"Maven","epss":0.01672,"exploited":false,"fixed_versions":["8.13.0"],"ghsa_id":"GHSA-c332-w4jm-55wv","id":"tcs_01M5N8R8VXRZ9DX9S4M7HNQSFE","modified_at":"2023-11-08T04:05:48.467420Z","published_at":"2021-05-04T17:42:02Z","references":["https://osv.dev/vulnerability/GHSA-c332-w4jm-55wv","https://github.com/vaadin/framework/security/advisories/GHSA-c332-w4jm-55wv","https://nvd.nist.gov/vuln/detail/CVE-2021-31409","https://github.com/vaadin/framework/issues/12240","https://github.com/vaadin/framework/pull/12241","https://vaadin.com/security/cve-2021-31409"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-c332-w4jm-55wv","url":"https://osv.dev/vulnerability/GHSA-c332-w4jm-55wv"}],"summary":"Regular expression Denial of Service (ReDoS) in EmailValidator class in V7 compatibility module in Vaadin 8"}