PT-2025-12085

Name of the Vulnerable Software and Affected Versions gaizhenbiao/chuanhuchatgpt affected versions not specified Description A Regular Expression Denial of Service ReDoS issue exists due to the server using the regex pattern r'+' to parse user input. This pattern can take polynomial time to match...

CVE-2024-10955: Inefficient Regular Expression Complexity

A Regular Expression Denial of Service ReDoS vulnerability exists in gaizhenbiao/chuanhuchatgpt, as of commit 20b2e02. The server uses the regex pattern r'+' to parse user input. In Python's default regex engine, this pattern can take polynomial time to match certain crafted inputs. An attacker c...