EUVD-2022-0096

Malicious code in bioql PyPI...

CVE-2022-39280

dparse is a parser for Python dependency files. dparse in versions before 0.5.2 contain a regular expression that is vulnerable to a Regular Expression Denial of Service. All the users parsing index server URLs with dparse are impacted by this vulnerability. A patch has been applied in version...

FreeBSD : py-dparse -- REDoS vulnerability (83b29e3f-886f-439f-b9a8-72e014479ff9)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 83b29e3f-886f-439f-b9a8-72e014479ff9 advisory. - dparse is a parser for Python dependency files. dparse in versions before 0.5.2 contain a regular...

Regular Expression Denial Of Service (ReDoS)

dparse is vulnerable to regular expression denial of service. The vulnerability exists due to improper regex parsing in index server URLs which allows a malicious attacker to cause a denial of service...

CVE-2022-39280

dparse is a parser for Python dependency files. dparse in versions before 0.5.2 contain a regular expression that is vulnerable to a Regular Expression Denial of Service. All the users parsing index server URLs with dparse are impacted by this vulnerability. A patch has been applied in version...

Design/Logic Flaw

dparse is a parser for Python dependency files. dparse in versions before 0.5.2 contain a regular expression that is vulnerable to a Regular Expression Denial of Service. All the users parsing index server URLs with dparse are impacted by this vulnerability. A patch has been applied in version...

PYSEC-2022-301

dparse is a parser for Python dependency files. dparse in versions before 0.5.2 contain a regular expression that is vulnerable to a Regular Expression Denial of Service. All the users parsing index server URLs with dparse are impacted by this vulnerability. A patch has been applied in version...

elib (0.1.7), epab (>=0.1.24, <=2018.4.2.3) +1 more potentially affected by CVE-2022-39280 via dparse (>=0.2.1, <=0.5.1)

dparse PYPI version =0.2.1, =0.1.24, =0.0.0, =3.1.3 Source cves: CVE-2022-39280 Source advisory: OSV:PYSEC-2022-301...

PYSEC-2022-301

dparse is a parser for Python dependency files. dparse in versions before 0.5.2 contain a regular expression that is vulnerable to a Regular Expression Denial of Service. All the users parsing index server URLs with dparse are impacted by this vulnerability. A patch has been applied in version...

CVE-2022-39280 Regular expression denial of service in dparse

dparse is a parser for Python dependency files. dparse in versions before 0.5.2 contain a regular expression that is vulnerable to a Regular Expression Denial of Service. All the users parsing index server URLs with dparse are impacted by this vulnerability. A patch has been applied in version...

CVE-2022-39280

dparse is a parser for Python dependency files. dparse in versions before 0.5.2 contain a regular expression that is vulnerable to a Regular Expression Denial of Service. All the users parsing index server URLs with dparse are impacted by this vulnerability. A patch has been applied in version...

elib (0.1.7), epab (>=0.1.24, <=2018.4.2.3) +1 more potentially affected by CVE-2022-39280 via dparse (>=0.2.1, <=0.5.1)

dparse PYPI version =0.2.1, =0.1.24, =0.0.0, =3.1.3 Source cves: CVE-2022-39280 Source advisory: MEND:CVE-2022-39280...

CVE-2022-39280 Regular expression denial of service in dparse

dparse is a parser for Python dependency files. dparse in versions before 0.5.2 contain a regular expression that is vulnerable to a Regular Expression Denial of Service. All the users parsing index server URLs with dparse are impacted by this vulnerability. A patch has been applied in version...

CVE-2022-39280

CVE-2022-39280 affects the dparse parser (Python dependency files) prior to version 0.5.2. It exposes a Regular Expression Denial of Service via an exploited regex in parsing index server URLs. A patch is available in 0.5.2; upgrade is advised. If upgrading is not feasible, avoid passing index se...

CVE-2022-39280 Regular expression denial of service in dparse

dparse is a parser for Python dependency files. dparse in versions before 0.5.2 contain a regular expression that is vulnerable to a Regular Expression Denial of Service. All the users parsing index server URLs with dparse are impacted by this vulnerability. A patch has been applied in version...

CVE-2022-39280: Uncontrolled Resource Consumption

dparse is a parser for Python dependency files. dparse in versions before 0.5.2 contain a regular expression that is vulnerable to a Regular Expression Denial of Service. All the users parsing index server URLs with dparse are impacted by this vulnerability. A patch has been applied in version...

elib (0.1.7), epab (>=0.1.24, <=2018.4.2.3) +1 more potentially affected by CVE-2022-39280 via dparse (>=0.2.1, <=0.5.1)

dparse PYPI version =0.2.1, =0.1.24, =0.0.0, =3.1.3 Source cves: CVE-2022-39280 Source advisory: GHSA-8FG9-P83M-X5PQ...

elib (0.1.7), epab (>=0.1.24, <=2018.4.2.3) +1 more potentially affected by CVE-2022-39280 via dparse (>=0.2.1, <=0.5.1)

dparse PYPI version =0.2.1, =0.1.24, =0.0.0, =3.1.3 Source cves: CVE-2022-39280 Source advisory: OSV:GHSA-8FG9-P83M-X5PQ...

ReDoS issue in dparse

Impact dparse versions prior to 0.5.1 contain a regular expression that is vulnerable to ReDoS Regular Expression Denial of Service. All users parsing index server URLs with dparse are impacted by this vulnerability. Patches The Patch is applied in the 0.5.2 version, all users are recommended to...

GHSA-8FG9-P83M-X5PQ ReDoS issue in dparse

Impact dparse versions prior to 0.5.1 contain a regular expression that is vulnerable to ReDoS Regular Expression Denial of Service. All users parsing index server URLs with dparse are impacted by this vulnerability. Patches The Patch is applied in the 0.5.2 version, all users are recommended to...