CVE-2018-25049lowCWE-1333

CVE-2018-25049: low-severity vulnerability in email-existence

email-existence index.js redos

Published 27 Dec 2022 · Updated 11 Apr 2025

Follow this CVE + Monitor email-existence + Monitor email-existence

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

8Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 3epss 0.8%

A vulnerability was found in email-existence. It has been rated as problematic. Affected by this issue is some unknown functionality of the file index.js. The manipulation leads to inefficient regular expression complexity. The name of the patch is 0029ba71b6ad0d8ec0baa2ecc6256d038bdd9b56. It is recommended to apply a patch to fix this issue. VDB-216854 is the identifier assigned to this vulnerability.

CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L

Affected products

n/a · email-existence

References

https://github.com/nmanousos/email-existence/commit/0029ba71b6ad0d8ec0baa2ecc6256d038bdd9b56 https://github.com/nmanousos/email-existence/pull/37 https://vuldb.com/?ctiid.216854 https://vuldb.com/?id.216854