CVE-2018-1107 @ Npm-is-my-json-valid-2.15.0

[RobertMickleCx]

Vulnerable Package issue exists @ Npm-is-my-json-valid-2.15.0 in branch master

It was discovered that the is-my-json-valid JavaScript library used an inefficient regular expression to validate JSON fields defined to have email format. A specially crafted JSON file could cause it to consume an excessive amount of CPU time when validated.

Namespace: RobertMickleCx
Repository: NodeGoat
Repository Url: https://github.com/RobertMickleCx/NodeGoat
CxAST-Project: RobertMickleCx/NodeGoat
CxAST platform scan: 4cad0b9d-cbe1-4acd-bb82-244764df9dbd
Branch: master
Application: NodeGoat
Severity: HIGH
State: NOT_IGNORED
Status: RECURRENT
CWE: CWE-400

---

Additional Info

---

References
Advisory
Issue
Commit
Pull request