Lucene search
K

9 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2022-6626

Malicious code in bioql PyPI...

7.5CVSS7.5AI score0.00334EPSS
Exploits1References5
RedhatCVE
RedhatCVE
added 2025/05/22 10:17 p.m.4 views

CVE-2022-1930

An exponential ReDoS Regular Expression Denial of Service can be triggered in the eth-account PyPI package, when an attacker is able to supply arbitrary input to the encodestructureddata method...

7.5CVSS6.9AI score0.00334EPSS
Exploits1References1
OSV
OSV
added 2024/10/16 2:40 p.m.7 views

MAL-2024-9973 Malicious code in eth-account-api (PyPI)

--- -= Per source details. Do not edit below this line.=-...

7.1AI score
Exploits0
Veracode
Veracode
added 2022/08/23 3:38 a.m.19 views

Regular Expression Denial Of Service (ReDoS)

eth-account is vulnerable to regular expression denial of service. The vulnerability exists due to the insecure regex pattern used for the TYPEREGEX attribute in the validatetypesattribute function of validation.py, allowing an attacker to crash the application by providing a malicious input...

7.5CVSS7.1AI score0.00334EPSS
Exploits1References4Affected Software1
Github Security Blog
Github Security Blog
added 2022/08/23 12:0 a.m.20 views

Regular expression denial of service in eth-account

An exponential ReDoS Regular Expression Denial of Service can be triggered in the eth-account PyPI package, when an attacker is able to supply arbitrary input to the encodestructureddata method...

7.5CVSS4.7AI score0.00334EPSS
Exploits1References4Affected Software1
NVD
NVD
added 2022/08/22 7:15 p.m.7 views

CVE-2022-1930

An exponential ReDoS Regular Expression Denial of Service can be triggered in the eth-account PyPI package, when an attacker is able to supply arbitrary input to the encodestructureddata method...

7.5CVSS0.00334EPSS
Exploits1References1
OSV
OSV
added 2022/08/22 7:15 p.m.10 views

CVE-2022-1930

An exponential ReDoS Regular Expression Denial of Service can be triggered in the eth-account PyPI package, when an attacker is able to supply arbitrary input to the encodestructureddata method...

7.5CVSS7.5AI score
Exploits0References1
CVE
CVE
added 2022/08/22 6:15 p.m.77 views

CVE-2022-1930

CVE-2022-1930 – ReDoS in eth-account encode_structured_data Affected software: eth-account Python package. Vulnerable component: encode_structured_data function, with root cause linked to the insecure regex pattern used for TYPE_REGEX in validation.py, enabling exponential Regular Expression Deni...

7.5CVSS6.5AI score0.00334EPSS
Exploits1References1Affected Software1
Positive Technologies
Positive Technologies
added 2022/08/22 12:0 a.m.3 views

PT-2022-4437 · Pypi · Eth-Account

Name of the Vulnerable Software and Affected Versions: eth-account affected versions not specified Description: The issue is related to an exponential ReDoS Regular Expression Denial of Service that can be triggered in the eth-account PyPI package. This occurs when an attacker is able to supply...

7.8CVSS7.3AI score0.00334EPSS
Exploits1References10
Rows per page
Query Builder