CVE-2021-42836

GJSON before 1.9.3 allows a ReDoS regular expression denial of service attack...

Design/Logic Flaw

GJSON before 1.9.3 allows a ReDoS regular expression denial of service attack...

CVE-2021-42836

CVE-2021-42836 affects the GJSON library. The vulnerability is a ReDoS (regular expression denial of service) in GJSON before 1.9.3, triggered by crafted JSON input. The provided documents confirm the issue and reference the upstream fix path: upgrading from 1.9.2 to 1.9.3 or later. No exploit de...

CVE-2021-42836

GJSON before 1.9.3 allows a ReDoS regular expression denial of service attack...

Ruby: RDoc::MethodAttr is vulnerable to Regular Expression Denial of Service (ReDoS)

Vulnerability description not provided...

GJSON 资源管理错误漏洞

Tidwall Gjson is a Go-based codebase for interacting with data in json format by the individual developers at Tidwall. GJSON A security vulnerability exists in GJSON before 1.9.3 that allows ReDoS Regular Expression Denial of Service attacks...

PT-2021-23690 · Gjson +1 · Gjson +1

Name of the Vulnerable Software and Affected Versions: GJSON versions prior to 1.9.3 Description: The issue allows a ReDoS regular expression denial of service attack. GJSON is a Go package that provides a fast and simple way to get values from a JSON document. A maliciously crafted path can caus...

CVE-2021-42836: Uncontrolled Resource Consumption

GJSON before 1.9.3 allows a ReDoS regular expression denial of service attack...

SUSE SLES12 Security Update : python36 (SUSE-SU-2021:3486-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:3486-1 advisory. - Update to 3.6.15: - CVE-2021-3737: Fixed a DoS caused by infinitely reading potential HTTP headers after a 100 Continue status...

openSUSE: Security Advisory for python (openSUSE-SU-2021:3489-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

SUSE: Security Advisory (SUSE-SU-2021:3489-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2021:3477-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLED12: libpython3_4m1_0 / libpython3_4m1_0-32bit / python3 / python3-base / etc (SUSE-SU-2021:3477-1)

The remote SUSE Linux SLED12 / SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:3477-1 advisory. - CVE-2021-3737: Fixed http client infinite line reading DoS after a http 100. bsc1189241 - CVE-2021-3733: Fixed ReDoS in...

SUSE: Security Advisory (SUSE-SU-2021:3486-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2021:3489-1 Security update for python

This update for python fixes the following issues: - CVE-2021-3737: Fixed http client infinite line reading DoS after a http 100. bsc1189241 - CVE-2021-3733: Fixed ReDoS in urllib.request. bsc1189287...

SUSE-SU-2021:3486-1 Security update for python36

This update for python36 fixes the following issues: - Update to 3.6.15: - CVE-2021-3737: Fixed a DoS caused by infinitely reading potential HTTP headers after a 100 Continue status response from the server. bsc1189241 - CVE-2021-3426: Fixed an information disclosure via pydoc. bsc1183374 -...

SUSE-SU-2021:3477-1 Security update for python3

This update for python3 fixes the following issues: - CVE-2021-3737: Fixed http client infinite line reading DoS after a http 100. bsc1189241 - CVE-2021-3733: Fixed ReDoS in urllib.request. bsc1189287...

Security update for python (moderate)

openSUSE Security Update: Security update for python Announcement ID: openSUSE-SU-2021:3489-1 Rating: moderate References: 1189241 1189287 Cross-References: CVE-2021-3733 CVE-2021-3737 CVSS scores: CVE-2021-3733 SUSE: 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2021-3737 SUSE: 6.5...

Important: Red Hat Security Advisory: Red Hat Quay v3.6.0 security, bug fix and enhancement update

An update is now available for Red Hat Quay 3. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the...

Vulnerability fixed in OTRS

A vulnerability has been fixed in OTRS. A malicious person at remote user could potentially exploit the vulnerability to cause a Denial-of-Service. OTRS uses the deprecated npm module "resolve-url-loader" which is depends on the module "postcs" and is vulnerable to the ReDoS attack. OTRS has...