What is CVE-2021-36716?

CVE-2021-36716 is a high-severity vulnerability in Segment Is-Email, classified under Uncontrolled Resource Consumption. CVSS score: 7.5/10. Published 2021-07-14.

How severe is CVE-2021-36716?

High severity. CVSS v3 base score is 7.5 out of 10.

Resource exhaustion in Segment Is-Email

CVE-2021-36716

A ReDoS (regular expression denial of service) flaw was found in the Segment is-email package before 1.0.1 for Node.js. An attacker that is able to provide crafted input to the isEmail(input) function may cause an application to consume an excessive amount of CPU.

Vulnerability class: DoS (Denial of Service)

EPSS: 0.010 (58.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.

Affected products

Segment Is-email
N/a — versions n/a

Weakness classification (CWE)

CWE-400 — Uncontrolled Resource Consumption

References

cve@mitre.org (Third Party Advisory, x_refsource_MISC, Release Notes)
cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2021-36716?: CVE-2021-36716 is a high-severity vulnerability in Segment Is-Email, classified under Uncontrolled Resource Consumption. CVSS score: 7.5/10. Published 2021-07-14.
How severe is CVE-2021-36716?: High severity. CVSS v3 base score is 7.5 out of 10.