25 matches found
Amazon Linux 2023 : python3.12, python3.12-devel, python3.12-idle (ALAS2023-2026-2124)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-2124 advisory. Attacker-controlled CSV samples can trigger super-linear regular-expression work during dialect sniffing and consume significant CPU when applications pass unbounded input to csv.Sniffer.sniff...
Amazon Linux 2023 : python3.14, python3.14-devel, python3.14-freethreading (ALAS2023-2026-2122)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-2122 advisory. Attacker-controlled CSV samples can trigger super-linear regular-expression work during dialect sniffing and consume significant CPU when applications pass unbounded input to csv.Sniffer.sniff...
Low: python3.12
Issue Overview: Attacker-controlled CSV samples can trigger super-linear regular-expression work during dialect sniffing and consume significant CPU when applications pass unbounded input to csv.Sniffer.sniff. CVE-2026-18503 Element.findall and fully-consumed Element.iterfind exhibit On^2 time...
Amazon Linux 2023 : python3.11, python3.11-devel, python3.11-idle (ALAS2023-2026-2125)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-2125 advisory. Attacker-controlled CSV samples can trigger super-linear regular-expression work during dialect sniffing and consume significant CPU when applications pass unbounded input to csv.Sniffer.sniff...
Low: python3.11
Issue Overview: Attacker-controlled CSV samples can trigger super-linear regular-expression work during dialect sniffing and consume significant CPU when applications pass unbounded input to csv.Sniffer.sniff. CVE-2026-18503 Element.findall and fully-consumed Element.iterfind exhibit On^2 time...
AZL-95586 CVE-2026-18503 affecting package docbook5-style-xsl 1.79.2-11
Attacker-controlled CSV samples can trigger super-linear regular-expression work during dialect sniffing and consume significant CPU when applications pass unbounded input to csv.Sniffer.sniff...
PSF-2026-35
Attacker-controlled CSV samples can trigger super-linear regular-expression work during dialect sniffing and consume significant CPU when applications pass unbounded input to csv.Sniffer.sniff...
EUVD-2022-0542
Malicious code in bioql PyPI...
CVE-2021-45686
An issue was discovered in the csv-sniffer crate through 2021-01-05 for Rust. preambleskipcount may read from uninitialized memory locations...
automl (>=0.2.6, <=0.2.7), rhai-sci (>=0.1.7, <=0.1.8) potentially affected by CVE-2021-45686 via csv-sniffer (0.1.1)
csv-sniffer CARGO version 0.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on csv-sniffer and may be impacted: - automl =0.2.6, =0.1.7, =0.1.8 Source cves: CVE-2021-45686 Source advisory: OSV:GHSA-R67P-M7G9-GXW6...
automl (>=0.2.6, <=0.2.7), rhai-sci (>=0.1.7, <=0.1.8) potentially affected by unknown CVE via csv-sniffer (0.1.1)
csv-sniffer CARGO version 0.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on csv-sniffer and may be impacted: - automl =0.2.6, =0.1.7, =0.1.8 Source cves: unknown CVE Source advisory: GHSA-R67P-M7G9-GXW6...
GHSA-9783-42PM-X5JQ Use of Uninitialized Resource in csv-sniffer.
Affected versions of this crate passes an uninitialized buffer to a user-provided Read implementation within fn preambleskipcount. Arbitrary Read implementations can read from the uninitialized buffer memory exposure and also can return incorrect number of bytes written to the buffer. Reading fro...
automl (>=0.2.6, <=0.2.7), rhai-sci (>=0.1.7, <=0.1.8) potentially affected by CVE-2021-45686 via csv-sniffer (0.1.1)
csv-sniffer CARGO version 0.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on csv-sniffer and may be impacted: - automl =0.2.6, =0.1.7, =0.1.8 Source cves: CVE-2021-45686 Source advisory: OSV:GHSA-9783-42PM-X5JQ...
Use of Uninitialized Resource in csv-sniffer.
Affected versions of this crate passes an uninitialized buffer to a user-provided Read implementation within fn preambleskipcount. Arbitrary Read implementations can read from the uninitialized buffer memory exposure and also can return incorrect number of bytes written to the buffer. Reading fro...
automl (>=0.2.6, <=0.2.7), rhai-sci (>=0.1.7, <=0.1.8) potentially affected by CVE-2021-45686 via csv-sniffer (0.1.1)
csv-sniffer CARGO version 0.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on csv-sniffer and may be impacted: - automl =0.2.6, =0.1.7, =0.1.8 Source cves: CVE-2021-45686 Source advisory: GHSA-9783-42PM-X5JQ...
CVE-2021-45686
An issue was discovered in the csv-sniffer crate through 2021-01-05 for Rust. preambleskipcount may read from uninitialized memory locations...
CVE-2021-45686
An issue was discovered in the csv-sniffer crate through 2021-01-05 for Rust. preambleskipcount may read from uninitialized memory locations...
Memory corruption
An issue was discovered in the csv-sniffer crate through 2021-01-05 for Rust. preambleskipcount may read from uninitialized memory locations...
Rust CSV-Sniffer crate security vulnerability
Rust csv-sniffer crate is This csv-sniffercrate provides methods to infer CSV file details delimiter selection, quoted characters, field count, field data type, etc.. Rust csv-sniffer crate A security vulnerability exists in versions prior to 2021-01-05, which stems from the fact that...
