Passing some special values to the filter
and filterout
parameters can cause an abnormally high CPU. Impact on the performance of the servers and RSSHub services.
It is fixed in 5c4177441417b44a6e45c3c63e9eac2504abeb5b , please update to this or the later versions as soon as possible.
Full report: https://github.com/DIYgod/RSSHub/issues/10045
If you have any questions or comments about this advisory:
@Rongronggg9
github.com/DIYgod/RSSHub
github.com/DIYgod/RSSHub/commit/4671720f4c5e1aaaad8fcc1dce684b6546baf2ff
github.com/DIYgod/RSSHub/commit/5c4177441417b44a6e45c3c63e9eac2504abeb5b
github.com/DIYgod/RSSHub/issues/10045
github.com/DIYgod/RSSHub/security/advisories/GHSA-jvxx-v45p-v5vf
nvd.nist.gov/vuln/detail/CVE-2022-31110