Lucene search
+L

2 matches found

Github Security Blog
Github Security Blog
added 2023/02/16 8:46 p.m.40 views

Regular Expression Denial of Service in Headers

Impact The Headers.set and Headers.append methods are vulnerable to Regular Expression Denial of Service ReDoS attacks when untrusted values are passed into the functions. This is due to the inefficient regular expression used to normalize the values in the headerValueNormalize utility function...

7.5CVSS7.4AI score0.01304EPSS
SaveExploits0References6Affected Software1
OSV
OSV
added 2023/02/16 8:46 p.m.44 views

GHSA-R6CH-MQF9-QC9W Regular Expression Denial of Service in Headers

Impact The Headers.set and Headers.append methods are vulnerable to Regular Expression Denial of Service ReDoS attacks when untrusted values are passed into the functions. This is due to the inefficient regular expression used to normalize the values in the headerValueNormalize utility function...

7.5CVSS7.1AI score0.01304EPSS
SaveExploits0References6
Rows per page
Query Builder