What’s Vulnerable › Vulnerabilities

CVE-2023-39619

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.3% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2023-10-25 · updated 2026-06-17
• Weakness: CWE-1333

Description

ReDos in NPMJS Node Email Check v.1.0.4 allows an attacker to cause a denial of service via a crafted string to the scpSyntax component.

Affected products

• Teomantuncer Node Email Check: 1.0.4

References

• https://gist.github.com/6en6ar/712a4c1eab0324f15e09232c77ea08f8
• https://github.com/teomantuncer/node-email-check/blob/main/main.js%2C
• https://www.npmjs.com/package/node-email-check
• https://gist.github.com/6en6ar/712a4c1eab0324f15e09232c77ea08f8
• https://github.com/teomantuncer/node-email-check/blob/main/main.js%2C
• https://www.npmjs.com/package/node-email-check

Get alerted when CVE-2023-39619 or the next vulnerability affects your stack