Lucene search
+L

2 matches found

OSV
OSV
added 2026/07/17 6:32 p.m.6 views

CVE-2026-52746 JSONata: Malicious inputs to "$toMillis" function can cause resource exhaustion

JSONata is a JSON query and transformation language. Prior to 2.2.0, malicious non-matching inputs to the $toMillis function can cause superlinear backtracking in the ISO-8601 validation regex, leading to denial of service in applications that evaluate user-provided JSONata expressions. This issu...

7.5CVSS5.3AI score0.0037EPSS
SaveExploits0References8
Github Security Blog
Github Security Blog
added 2021/05/13 8:23 p.m.57 views

Use of "infinity" as an input to datetime and date fields causes infinite loop in pydantic

Impact Passing either 'infinity', 'inf' or float'inf' or their negatives to datetime or date fields causes validation to run forever with 100% CPU usage on one CPU. Patches Pydantic is be patched with fixes available in the following versions: v1.8.2 v1.7.4 v1.6.2 All these versions are available...

7.5CVSS7.2AI score0.00967EPSS
SaveExploits0References11Affected Software1
Rows per page
Query Builder