{"id":"CVE-2020-7761","aliases":["GHSA-hgpf-97c5-74fc"],"url":"https://o3.security/vulnerability/CVE-2020-7761","summary":"Regular expression denial of service in @absolunet/kafe","details":"This affects the package @absolunet/kafe before 3.2.10. It allows cause a denial of service when validating crafted invalid emails.","published":"2020-11-05T11:15:12.397Z","modified":"2026-07-09T01:25:16.798957Z","cvss":{"score":5.3,"severity":"MEDIUM","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},"epss":null,"cisaKev":null,"exploitsKnown":null,"affectedPackages":[{"ecosystem":"npm","name":"@absolunet/kafe","fixedVersion":"3.2.10"}],"fix":{"url":"https://github.com/absolunet/kafe/commit/c644c798bfcdc1b0bbb1f0ca59e2e2664ff3fdd0%23diff-f0f4b5b19ad46588ae9d7dc1889f681252b0698a4ead3a77b7c7d127ee657857","label":"absolunet/kafe@c644c79"},"references":[{"type":"ADVISORY","url":"https://snyk.io/vuln/SNYK-JS-ABSOLUNETKAFE-1017403"},{"type":"FIX","url":"https://github.com/absolunet/kafe/commit/c644c798bfcdc1b0bbb1f0ca59e2e2664ff3fdd0%23diff-f0f4b5b19ad46588ae9d7dc1889f681252b0698a4ead3a77b7c7d127ee657857"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2026-07-09T01:25:16.798957Z"}}