Lucene search
+L

11 matches found

OSV
OSV
added 2026/07/06 8:3 a.m.7 views

PYSEC-2026-806 Regular expression denial of service in eth-account

An exponential ReDoS Regular Expression Denial of Service can be triggered in the eth-account PyPI package, when an attacker is able to supply arbitrary input to the encodestructureddata method...

5.9CVSS6.1AI score0.00795EPSS
SaveExploits1References6
EUVD
EUVD
added 2025/10/03 8:7 p.m.8 views

EUVD-2022-6626

Malicious code in bioql PyPI...

7.5CVSS7.5AI score0.00795EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
added 2025/05/22 10:17 p.m.10 views

CVE-2022-1930

An exponential ReDoS Regular Expression Denial of Service can be triggered in the eth-account PyPI package, when an attacker is able to supply arbitrary input to the encodestructureddata method...

7.5CVSS6.9AI score0.00795EPSS
SaveExploits1References1
OSV
OSV
added 2024/10/16 2:40 p.m.14 views

MAL-2024-9973 Malicious code in eth-account-api (PyPI)

--- -= Per source details. Do not edit below this line.=-...

7.1AI score
SaveExploits0
Veracode
Veracode
added 2022/08/23 3:38 a.m.25 views

Regular Expression Denial Of Service (ReDoS)

eth-account is vulnerable to regular expression denial of service. The vulnerability exists due to the insecure regex pattern used for the TYPEREGEX attribute in the validatetypesattribute function of validation.py, allowing an attacker to crash the application by providing a malicious input...

7.5CVSS7.1AI score0.00795EPSS
SaveExploits1References4Affected Software1
Github Security Blog
Github Security Blog
added 2022/08/23 12:0 a.m.28 views

Regular expression denial of service in eth-account

An exponential ReDoS Regular Expression Denial of Service can be triggered in the eth-account PyPI package, when an attacker is able to supply arbitrary input to the encodestructureddata method...

7.5CVSS4.7AI score0.00795EPSS
SaveExploits1References4Affected Software1
ATTACKERKB
ATTACKERKB
added 2022/08/22 7:15 p.m.7 views

CVE-2022-1930

An exponential ReDoS Regular Expression Denial of Service can be triggered in the eth-account PyPI package, when an attacker is able to supply arbitrary input to the encodestructureddata method...

7.5CVSS7.2AI score0.00795EPSS
SaveExploits1References2
OSV
OSV
added 2022/08/22 7:15 p.m.14 views

CVE-2022-1930

An exponential ReDoS Regular Expression Denial of Service can be triggered in the eth-account PyPI package, when an attacker is able to supply arbitrary input to the encodestructureddata method...

7.5CVSS7.5AI score
SaveExploits0References1
NVD
NVD
added 2022/08/22 7:15 p.m.25 views

CVE-2022-1930

An exponential ReDoS Regular Expression Denial of Service can be triggered in the eth-account PyPI package, when an attacker is able to supply arbitrary input to the encodestructureddata method...

7.5CVSS0.00795EPSS
SaveExploits1References1
CVE
CVE
added 2022/08/22 6:15 p.m.92 views

CVE-2022-1930

CVE-2022-1930 – ReDoS in eth-account encode_structured_data Affected software: eth-account Python package. Vulnerable component: encode_structured_data function, with root cause linked to the insecure regex pattern used for TYPE_REGEX in validation.py, enabling exponential Regular Expression Deni...

7.5CVSS6.5AI score0.00795EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies
added 2022/08/22 12:0 a.m.6 views

PT-2022-4437

Name of the Vulnerable Software and Affected Versions eth-account affected versions not specified Description The issue is related to an exponential ReDoS Regular Expression Denial of Service that can be triggered in the eth-account PyPI package. This occurs when an attacker is able to supply...

7.8CVSS7.2AI score0.00795EPSS
SaveExploits1References13
Rows per page
Query Builder