Lucene search
+L

1 matches found

OSV
OSV
added 2026/05/28 5:34 p.m.20 views

GHSA-8V8V-G73J-492J Symfony's JsonPath Evaluates Attacker-Controlled Regular Expressions in match()/search() Without Limits — ReDoS

Description The JsonPath component's match and search filter functions compile a caller-supplied pattern straight into pregmatch: php 'match' = @pregmatch\sprintf'/^%s$/u', $this-transformJsonPathRegex$argList1, $value, 'search' = @pregmatch"/$this-transformJsonPathRegex$argList1/u", $value,...

6.9CVSS5.8AI score0.0063EPSS
SaveExploits0References6
Rows per page
Query Builder