This affects the package @absolunet/kafe before 3.2.10. It allows cause a denial of service when validating crafted invalid emails.
No PoCs from references.
- https://github.com/engn33r/awesome-redos-security
- https://github.com/yetingli/PoCs