{"action":"Upgrade com.vaadin:vaadin-text-field-flow to 2.3.3 (2.x) or 4.0.3 (4.x) or later.","affected":[{"fixed":"2.3.3","introduced":"2.0.4"},{"fixed":"4.0.3","introduced":"3.0.0"}],"component":"com.vaadin:vaadin-text-field-flow","cve_ids":[],"ecosystem":"Maven","exploited":false,"fixed_versions":["2.3.3","4.0.3"],"ghsa_id":"GHSA-crh4-294p-vcfq","id":"tcs_01M5N8T71Z98WVW1AGNVQTFQ4V","modified_at":"2024-12-02T05:42:09.576055Z","published_at":"2021-04-19T14:53:20Z","references":["https://osv.dev/vulnerability/GHSA-crh4-294p-vcfq","https://github.com/vaadin/flow-components/security/advisories/GHSA-crh4-294p-vcfq","https://github.com/vaadin/flow-components","https://vaadin.com/security/cve-2021-31405"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-crh4-294p-vcfq","url":"https://osv.dev/vulnerability/GHSA-crh4-294p-vcfq"}],"summary":"Regular expression denial of service (ReDoS) in EmailField component in Vaadin 14 and 15-17"}