Lucene search
+L

1 matches found

RedHat Linux
RedHat Linux
added 2021/08/24 12:50 p.m.13 views

python-jinja2: ReDoS vulnerability in the urlize filter

A flaw was found in python-jinja2. The ReDOS vulnerability of the regex is mainly due to the sub-pattern a-zA-Z0-9.-+.a-zA-Z0-9.-+. This issue can be mitigated by Markdown to format user content instead of the urlize filter, or by implementing request timeouts and limiting process memory...

5.3CVSS7.2AI score0.03546EPSS
SaveExploits1References4
Rows per page
Query Builder