CVE-2026-77299

The Regexp2 library for Go (prior to version 2.3.0 ) is vulnerable to unbounded memory amplification via a large {m} quantifier on a zero-width subexpression. When the engine matches a pattern like (?:){50000000}, it executes an empty loop body, pushing two integers onto the backtracking stack fo...

CVE-2026-77299: dlclark regexp2: Regexp2 is a feature-rich RegExp engine for Go

Regexp2 is a feature-rich RegExp engine for Go. Prior to version 2.3.0, when regexp2 compiles and matches a pattern containing a large fixed-count quantifier applied to a zero-width subexpression — e.g. ?:50000000 — the match engine executes the empty loop body m-1 times, pushing two integers ont...

Ubuntu Update for icu vulnerabilities USN-591-1

Ubuntu Update for Linux kernel vulnerabilities USN-591-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN5911.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for icu vulnerabilities USN-591-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...