confing (>=0.1.0 <=0.1.4), prismh-core (>=0.1.0 <=0.4.0) +1 more potentially affected by CVE-2017-18361 via colander (>=1.0.0 <=1.4.0)

colander PYPI version =1.0.0, =0.1.0, =0.1.0, =0.5.0, =0.8.3 Source cves: CVE-2017-18361 Source advisory: OSV:GHSA-RV95-4WXJ-6FQQ...

CVE-2017-18361

CVE-2017-18361 affects Pylons Colander up to version 1.6, where the URL validator can enter an infinite loop due to an unclosed parenthesis, causing a denial of service. The connected documents do not provide a remediation/patch version; monitor for updates from project maintainers.

CVE-2017-18361

Removed by vendor...