Lucene search
+L

7 matches found

Positive Technologies
Positive Technologies
•added 2026/08/04 12:00 a.m.•8 views

PT-2026-67861

Name of the Vulnerable Software and Affected Versions Open WebUI versions 0.9.6 through 0.10.x Description The built-in knowledge search tools allow a chat participant to specify a pattern used to grep knowledge files. When patterns contain regex metacharacters, they are compiled using Python's...

6.5CVSS5.8AI score0.00592EPSS
SaveExploits1References13
Positive Technologies
Positive Technologies
•added 2026/08/04 12:00 a.m.•4 views

PT-2026-67900

Summary The built-in knowledge search tools let a chat participant choose the pattern used to grep knowledge files. Patterns containing regex metacharacters were compiled with Python's backtracking re engine and run against every line of every reachable file, with no time limit anywhere on that...

6.5CVSS5.8AI score
SaveExploits0References6
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•18 views

EUVD-2025-7014

Malicious code in bioql PyPI...

6.5CVSS6.6AI score0.00947EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
•added 2025/03/22 1:11 p.m.•18 views

CVE-2024-12391

A vulnerability in binary-husky/gptacademic, as of commit 310122f, allows for a Regular Expression Denial of Service ReDoS attack. The function '解析项目源码(手动指定和筛选源码文件类型)' permits the execution of user-provided regular expressions. Certain regular expressions can cause the Python RE engine to take...

6.5CVSS7.1AI score0.00947EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2025/03/20 10:10 a.m.•28 views

CVE-2024-12391 Regular Expression Denial of Service (ReDoS) in binary-husky/gpt_academic

A vulnerability in binary-husky/gptacademic, as of commit 310122f, allows for a Regular Expression Denial of Service ReDoS attack. The function '解析项目源码(手动指定和筛选源码文件类型)' permits the execution of user-provided regular expressions. Certain regular expressions can cause the Python RE engine to take...

6.5CVSS0.00947EPSS
SaveExploits1References1
Mend
Mend
•added 2025/03/20 10:10 a.m.•7 views

CVE-2024-12391

A vulnerability in binary-husky/gptacademic, as of commit 310122f, allows for a Regular Expression Denial of Service ReDoS attack. The function '解析项目源码(手动指定和筛选源码文件类型)' permits the execution of user-provided regular expressions. Certain regular expressions can cause the Python RE engine to take...

7.1CVSS0.00947EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/20 12:00 a.m.•7 views

CVE-2024-12391: Inefficient Regular Expression Complexity

A vulnerability in binary-husky/gptacademic, as of commit 310122f, allows for a Regular Expression Denial of Service ReDoS attack. The function '解析项目源码(手动指定和筛选源码文件类型)' permits the execution of user-provided regular expressions. Certain regular expressions can cause the Python RE engine to take...

6.5CVSS6.7AI score0.00947EPSS
SaveExploits1References1
Rows per page
Query Builder