First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2021-3765

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

validator.js is vulnerable to Inefficient Regular Expression Complexity

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

Affected software

Vendor	Product	Versions
validatorjs	validatorjs/validator.js	>= unspecified, < 13.7.0

References

Timeline

Published: Nov 2, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-376507.8TensorFlow is an end-to-end open source platform for machine learning. In affected versions the implementation for `tf.raw_ops.ExperimentalD CVE-2021-376517.8TensorFlow is an end-to-end open source platform for machine learning. In affected versions the implementation for `tf.raw_ops.FractionalAvg CVE-2021-376527.8TensorFlow is an end-to-end open source platform for machine learning. In affected versions the implementation for `tf.raw_ops.BoostedTreesC CVE-2021-376535.5TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can trigger a crash via a floating p CVE-2021-376547.1TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can trigger a crash via a `CHECK`-fa CVE-2021-376557.3TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can trigger a read from outside of b CVE-2021-376567.8TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can cause undefined behavior via bin CVE-2021-376577.8TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can cause undefined behavior via bin CVE-2021-376587.8TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can cause undefined behavior via bin CVE-2021-376597.8TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can cause undefined behavior via bin CVE-2021-37669.8objection.js is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')CVE-2021-376605.5TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can cause a floating point exception

CVE-2021-3765: High severity, CVSS 7.5 | Vulnix