Lucene search
+L

5 matches found

osv-pysec
osv-pysec
•added 2025/03/20 10:15 a.m.•22 views

PYSEC-2025-94

A Regular Expression Denial of Service ReDoS vulnerability exists in gaizhenbiao/chuanhuchatgpt, as of commit 20b2e02. The server uses the regex pattern r'+' to parse user input. In Python's default regex engine, this pattern can take polynomial time to match certain crafted inputs. An attacker c...

6.5CVSS6.6AI score0.0075EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/20 12:00 a.m.•4 views

CVE-2024-10955: Inefficient Regular Expression Complexity

A Regular Expression Denial of Service ReDoS vulnerability exists in gaizhenbiao/chuanhuchatgpt, as of commit 20b2e02. The server uses the regex pattern r'+' to parse user input. In Python's default regex engine, this pattern can take polynomial time to match certain crafted inputs. An attacker c...

6.5CVSS6.6AI score0.0075EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/03/20 12:00 a.m.•5 views

PT-2025-12085

Name of the Vulnerable Software and Affected Versions gaizhenbiao/chuanhuchatgpt affected versions not specified Description A Regular Expression Denial of Service ReDoS issue exists due to the server using the regex pattern r'+' to parse user input. This pattern can take polynomial time to match...

6.5CVSS0.0075EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/20 12:00 a.m.•3 views

CVE-2024-10624: Inefficient Regular Expression Complexity

A Regular Expression Denial of Service ReDoS vulnerability exists in the gradio-app/gradio repository, affecting the gr.Datetime component. The affected version is git commit 98cbcae. The vulnerability arises from the use of a regular expression ^?:\snow\s?:-\s\d+\sdmhs??\s$ to process user input...

7.5CVSS7.2AI score0.01099EPSS
SaveExploits1References1
OpenVAS
OpenVAS
•added 2023/10/26 12:00 a.m.•23 views

Mageia: Security Advisory (MGASA-2023-0302)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.6AI score0.01703EPSS
SaveExploits1References3
Rows per page
Query Builder