Regular expression denial of service in url_regex

2022-05-2100:00:25

Google

osv.dev

0.001 Low

EPSS

Percentile

32.1%

All versions of package url-regex are vulnerable to Regular Expression Denial of Service (ReDoS) which can cause the CPU usage to crash.

CPENameOperatorVersion
url-regexeq1.0.0
url-regexeq1.0.4
url-regexeq1.0.2
url-regexeq1.0.1
url-regexeq1.0.3

Name	Operator	Version
url-regex	eq	1.0.0
url-regex	eq	1.0.4
url-regex	eq	1.0.2
url-regex	eq	1.0.1
url-regex	eq	1.0.3

References

github.com/AlexFlipnote/url_regex

github.com/AlexFlipnote/url_regex/blob/master/url_regex/url_regex.py

nvd.nist.gov/vuln/detail/CVE-2022-21195

snyk.io/vuln/SNYK-PYTHON-URLREGEX-2347643

0.001 Low

EPSS

Percentile

32.1%

Related for OSV:GHSA-HG3W-7HJ9-M3F7