Lucene search

K
osvGoogleOSV:GHSA-325J-24F4-QV5X
HistoryMar 07, 2018 - 10:22 p.m.

Regular Expression Denial of Service in ssri

2018-03-0722:22:20
Google
osv.dev
5

0.001 Low

EPSS

Percentile

46.8%

Version of ssri prior to 5.2.2 are vulnerable to regular expression denial of service (ReDoS) when using strict mode.

Recommendation

Update to version 5.2.2 or later.

CPENameOperatorVersion
ssrilt5.2.2

0.001 Low

EPSS

Percentile

46.8%