Medium severity6.5NVD Advisory· Published May 14, 2021· Updated Jun 17, 2026

CVE-2021-32816

Description

ProtonMail Web Client is the official AngularJS web client for the ProtonMail secure email service. ProtonMail Web Client before version 3.16.60 has a regular expression denial-of-service vulnerability. This was fixed in commit 6687fb. There is a full report available in the referenced GHSL-2021-027.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Protonmail/Protonmail
cpe:2.3:a:protonmail:protonmail:*:*:*:*:*:*:*:*
Range: <3.16.60
Protonmail/Web Clientllm-create
Range: <3.16.60
ProtonMail/WebClientv5
Range: < 3.16.60

Patches

Vulnerability mechanics

References

github.com/ProtonMail/WebClient/commit/6687fbb867ef872c96cf4fde68cb6e9c58d3fddcnvdPatchThird Party Advisory
securitylab.github.com/advisories/GHSL-2021-027-redos-ProtonMail/nvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000