EUVD-2025-25266

Malicious code in bioql PyPI...

PT-2025-33896 · Microsoft +1 · Knack +1

Name of the Vulnerable Software and Affected Versions: Microsoft Knack version 0.12.0 Description: The software is susceptible to a Regular expression Denial of Service ReDoS issue within the knack.introspection module. Recommendations: At the moment, there is no information about a newer version...

CVE-2025-54364

Summary (CVE-2025-54364) Microsoft Knack 0.12.0 contains a vulnerability in the knack.introspection module where option_descriptions uses an inefficient regex "\s(:param)\s+(.+?)\s:(.*)" that can backtrack catastrophically with crafted docstrings containing lots of whitespace, potentially causing...

CVE-2025-54364

Microsoft Knack 0.12.0 allows Regular expression Denial of Service ReDoS in the knack.introspection module. optiondescriptions employs an inefficient regular expression pattern: "\s:param\s+.+?\s:." that is susceptible to catastrophic backtracking when processing crafted docstrings containing a...