[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2020-7754":6},{"stargazers_count":4,"fetched_at":5},7,"2026-06-05T02:55:30.529Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":18,"aliases":32,"duplicate_of":9,"upstream":34,"downstream":35,"duplicates":48,"related":49,"reserved_at":9,"published_at":52,"modified_at":53,"state":54,"summary":55,"references_raw":63,"kevs":90,"epss":91,"epss_history":94,"metrics":345,"affected":359},"CVE-2020-7754","This affects the package npm-user-validate before 1.0.1. The regex that validates user emails took exponentially longer to process long input strings beginning with @ characters.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":9,"likelihood_of_exploit":9,"capec":17},"NVD-CWE-NOINFO","Insufficient Information","NVD uses this CWE ID when there is insufficient information to assign a specific CWE.","placeholder","NVD-Reserved",[],[19,28],{"_key":20,"name":21,"source":22,"url":23,"maturity":24,"reliability_score":25,"verified":26,"type":9,"platforms":27,"requires_auth":9,"exploitdb":9,"metasploit":9},"REF_5493D3BF523722CA","Exploit Reference (snyk.io)","reference","https://snyk.io/vuln/SNYK-JS-NPMUSERVALIDATE-1019352","unknown",0.2,false,[],{"_key":29,"name":21,"source":22,"url":30,"maturity":24,"reliability_score":25,"verified":26,"type":9,"platforms":31,"requires_auth":9,"exploitdb":9,"metasploit":9},"REF_B5ED99DFBDDF87D0","https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1019353",[],[33],"GHSA-pw54-mh39-w3hc",[],[36,38,40,42,44,46],{"_key":37},"RHSA-2021:0485",{"_key":39},"RHSA-2021:0549",{"_key":41},"RHSA-2021:0421",{"_key":43},"RHSA-2021:0521",{"_key":45},"RHSA-2021:0548",{"_key":47},"RHSA-2021:0551",[],[50],{"_key":51},"GHSA-XGH6-85XH-479P","2020-10-27T15:05:18.052Z","2024-09-17T04:28:53.351Z","Modified",{"cisa_kev":26,"cisa_ransomware":26,"cisa_vendor":9,"epss_severity":56,"epss_score":57,"severity":58,"severity_score":59,"severity_version":60,"severity_source":61,"severity_vector":62,"severity_status":54},"low",0.01798,"high",7.5,"v3.1","cve.org","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",[64,73,76,80,85],{"url":23,"sources":65,"tags":68},[61,66,67],"nvd","osv_npm",[69,70,71,72],"X Refsource MISC","Exploit","Third Party Advisory","WEB",{"url":30,"sources":74,"tags":75},[61,66,67],[69,70,71,72],{"url":77,"sources":78,"tags":79},"https://github.com/npm/npm-user-validate/security/advisories/GHSA-xgh6-85xh-479p",[61,66,67],[69,71,72],{"url":81,"sources":82,"tags":83},"https://github.com/npm/npm-user-validate/commit/c8a87dac1a4cc6988b5418f30411a8669bef204e",[61,66,67],[69,84,71,72],"Patch",{"url":86,"sources":87,"tags":88},"https://nvd.nist.gov/vuln/detail/CVE-2020-7754",[67],[89],"Advisory",[],{"date":92,"score":57,"percentile":93},"2026-06-04",0.83121,[95,99,101,103,106,109,112,115,118,121,124,127,130,133,136,140,142,145,148,151,154,156,159,162,164,166,169,171,174,177,180,183,186,189,191,194,197,200,203,206,208,211,214,217,220,223,226,229,232,235,237,240,243,246,249,252,255,258,261,264,267,270,273,275,277,279,282,285,288,291,293,296,298,300,303,306,308,310,312,315,318,321,324,327,330,333,335,338,340,342],{"date":96,"score":97,"percentile":98},"2025-11-04",0.0163,0.81264,{"date":100,"score":97,"percentile":98},"2025-11-05",{"date":102,"score":97,"percentile":98},"2025-11-06",{"date":104,"score":97,"percentile":105},"2025-11-07",0.81275,{"date":107,"score":97,"percentile":108},"2025-11-08",0.81283,{"date":110,"score":97,"percentile":111},"2025-11-09",0.81279,{"date":113,"score":97,"percentile":114},"2025-11-10",0.81273,{"date":116,"score":97,"percentile":117},"2025-11-11",0.8128,{"date":119,"score":97,"percentile":120},"2025-11-12",0.81292,{"date":122,"score":97,"percentile":123},"2025-11-13",0.81299,{"date":125,"score":97,"percentile":126},"2025-11-14",0.81304,{"date":128,"score":97,"percentile":129},"2025-11-15",0.81301,{"date":131,"score":97,"percentile":132},"2025-11-16",0.81302,{"date":134,"score":97,"percentile":135},"2025-11-17",0.813,{"date":137,"score":138,"percentile":139},"2025-11-18",0.01863,0.81586,{"date":141,"score":138,"percentile":139},"2025-11-19",{"date":143,"score":138,"percentile":144},"2025-11-20",0.81592,{"date":146,"score":97,"percentile":147},"2025-11-21",0.81315,{"date":149,"score":97,"percentile":150},"2025-11-22",0.81321,{"date":152,"score":97,"percentile":153},"2025-11-23",0.81311,{"date":155,"score":97,"percentile":153},"2025-11-24",{"date":157,"score":97,"percentile":158},"2025-11-25",0.81312,{"date":160,"score":97,"percentile":161},"2025-11-26",0.81314,{"date":163,"score":97,"percentile":150},"2025-11-27",{"date":165,"score":97,"percentile":158},"2025-11-28",{"date":167,"score":97,"percentile":168},"2025-11-29",0.81316,{"date":170,"score":97,"percentile":150},"2025-11-30",{"date":172,"score":97,"percentile":173},"2025-12-01",0.81401,{"date":175,"score":97,"percentile":176},"2025-12-02",0.81404,{"date":178,"score":97,"percentile":179},"2025-12-03",0.81403,{"date":181,"score":97,"percentile":182},"2025-12-04",0.81322,{"date":184,"score":97,"percentile":185},"2025-12-05",0.81331,{"date":187,"score":97,"percentile":188},"2025-12-06",0.81332,{"date":190,"score":97,"percentile":188},"2025-12-07",{"date":192,"score":97,"percentile":193},"2025-12-08",0.81334,{"date":195,"score":97,"percentile":196},"2025-12-09",0.81352,{"date":198,"score":97,"percentile":199},"2025-12-10",0.81377,{"date":201,"score":97,"percentile":202},"2025-12-11",0.81387,{"date":204,"score":97,"percentile":205},"2025-12-12",0.81398,{"date":207,"score":97,"percentile":205},"2025-12-13",{"date":209,"score":97,"percentile":210},"2025-12-14",0.81394,{"date":212,"score":97,"percentile":213},"2025-12-15",0.8139,{"date":215,"score":97,"percentile":216},"2025-12-16",0.81399,{"date":218,"score":97,"percentile":219},"2025-12-17",0.81406,{"date":221,"score":97,"percentile":222},"2025-12-18",0.8142,{"date":224,"score":97,"percentile":225},"2025-12-19",0.81426,{"date":227,"score":97,"percentile":228},"2025-12-20",0.81422,{"date":230,"score":97,"percentile":231},"2025-12-21",0.81418,{"date":233,"score":97,"percentile":234},"2025-12-22",0.81416,{"date":236,"score":97,"percentile":231},"2025-12-23",{"date":238,"score":97,"percentile":239},"2025-12-24",0.81431,{"date":241,"score":97,"percentile":242},"2025-12-25",0.81448,{"date":244,"score":97,"percentile":245},"2025-12-26",0.81449,{"date":247,"score":97,"percentile":248},"2025-12-27",0.81482,{"date":250,"score":97,"percentile":251},"2025-12-28",0.81435,{"date":253,"score":97,"percentile":254},"2025-12-29",0.81432,{"date":256,"score":97,"percentile":257},"2025-12-30",0.81439,{"date":259,"score":97,"percentile":260},"2025-12-31",0.81452,{"date":262,"score":97,"percentile":263},"2026-01-01",0.81525,{"date":265,"score":97,"percentile":266},"2026-01-02",0.8152,{"date":268,"score":97,"percentile":269},"2026-01-03",0.81514,{"date":271,"score":97,"percentile":272},"2026-01-04",0.8143,{"date":274,"score":97,"percentile":225},"2026-01-05",{"date":276,"score":97,"percentile":272},"2026-01-06",{"date":278,"score":97,"percentile":254},"2026-01-07",{"date":280,"score":97,"percentile":281},"2026-01-08",0.81441,{"date":283,"score":97,"percentile":284},"2026-01-09",0.81443,{"date":286,"score":97,"percentile":287},"2026-01-10",0.81445,{"date":289,"score":97,"percentile":290},"2026-01-11",0.81438,{"date":292,"score":97,"percentile":239},"2026-01-12",{"date":294,"score":97,"percentile":295},"2026-01-13",0.81428,{"date":297,"score":97,"percentile":245},"2026-01-14",{"date":299,"score":97,"percentile":245},"2026-01-15",{"date":301,"score":97,"percentile":302},"2026-01-16",0.81458,{"date":304,"score":97,"percentile":305},"2026-01-17",0.81465,{"date":307,"score":97,"percentile":302},"2026-01-18",{"date":309,"score":97,"percentile":260},"2026-01-19",{"date":311,"score":97,"percentile":260},"2026-01-20",{"date":313,"score":97,"percentile":314},"2026-01-21",0.81459,{"date":316,"score":97,"percentile":317},"2026-01-22",0.81468,{"date":319,"score":97,"percentile":320},"2026-01-23",0.81492,{"date":322,"score":97,"percentile":323},"2026-01-24",0.815,{"date":325,"score":97,"percentile":326},"2026-01-25",0.81496,{"date":328,"score":97,"percentile":329},"2026-01-26",0.81495,{"date":331,"score":97,"percentile":332},"2026-01-27",0.81494,{"date":334,"score":97,"percentile":320},"2026-01-28",{"date":336,"score":97,"percentile":337},"2026-01-29",0.81489,{"date":339,"score":97,"percentile":337},"2026-01-30",{"date":341,"score":97,"percentile":332},"2026-01-31",{"date":343,"score":97,"percentile":344},"2026-02-01",0.81576,[346,351,357],{"source":61,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":347,"cvss_v4_0":9},{"baseScore":59,"baseSeverity":348,"vectorString":62,"impactScore":349,"exploitabilityScore":350},"HIGH",6,10,{"source":66,"cvss_v2_0":352,"cvss_v3_0":9,"cvss_v3_1":356,"cvss_v4_0":9},{"baseScore":353,"baseSeverity":9,"vectorString":354,"impactScore":355,"exploitabilityScore":350},5,"AV:N/AC:L/Au:N/C:N/I:N/A:P",2.9,{"baseScore":59,"baseSeverity":348,"vectorString":62,"impactScore":349,"exploitabilityScore":350},{"source":67,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":358,"cvss_v4_0":9},{"baseScore":59,"baseSeverity":9,"vectorString":62,"impactScore":349,"exploitabilityScore":350},[360,371],{"ecosystem":361,"name":362,"vendor":361,"product":362,"cpe_part":9,"purl_type":363,"purl_namespace":9,"purl_name":362,"source":9,"versions":364},"Npm","npm-user-validate","npm",[365],{"version":366,"is_range":367,"range_type":368,"version_start":9,"version_start_type":9,"version_end":369,"version_end_type":370,"fixed_in":9},"lt1_0_1",true,"semver","1.0.1","excluding",{"ecosystem":9,"name":362,"vendor":372,"product":362,"cpe_part":373,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":374},"npmjs","a",[375],{"version":376,"is_range":367,"range_type":377,"version_start":9,"version_start_type":9,"version_end":369,"version_end_type":370,"fixed_in":9},"lt1.0.1","cpe"]