Regular Expression Denial of Service (ReDoS)

Overview Affected versions of this package are vulnerable to Regular Expression Denial of Service ReDoS via the lexer's handling of dollar-quoted literals and multiline comments. The regular expressions used to match $tag$...$tag$ dollar-quoted literals and /.../ multiline comments employed a laz...

GHSA-PRG7-HCFM-MFCR sqlparse: Inefficient Regex Handling of Dollar-Quoted SQL Literals Leads to ReDoS (Denial of Service)

Summary sqlparse contains a Regular Expression Denial of Service ReDoS vulnerability in its dollar-quoted SQL literal lexer. The regex pattern at sqlparse/keywords.py:33 uses a backreference \1 to match closing dollar-quote delimiters, causing On² CPU complexity when processing inputs containing...

CVE-2019-11835

cJSON before 1.7.11 allows out-of-bounds access, related to multiline comments...

EUVD-2019-3498

Malware in sbrugna...

cJSON before 1.7.11 allows out-of-bounds access related to multiline comments.

...

CVE-2019-11835

cJSON before 1.7.11 allows out-of-bounds access, related to multiline comments...

DEBIAN-CVE-2019-11835

cJSON before 1.7.11 allows out-of-bounds access, related to multiline comments...

AZL-41390 CVE-2019-11835 affecting package libglvnd for versions less than 1.7.0-2

cJSON before 1.7.11 allows out-of-bounds access, related to multiline comments...

CVE-2019-11835

cJSON before 1.7.11 allows out-of-bounds access, related to multiline comments...

CVE-2019-11835

cJSON before 1.7.11 allows out-of-bounds access, related to multiline comments...

Cross site scripting

cJSON before 1.7.11 allows out-of-bounds access, related to multiline comments...

CVE-2019-11835

cJSON before 1.7.11 allows out-of-bounds access, related to multiline comments...

CVE-2019-11835

CVE-2019-11835 affects the cJSON library prior to 1.7.11, where parsing issues with multiline comments enable out-of-bounds access. Impact per sources: high severity (CVSS 3.1 base 9.8; NETWORK, LOW complexity, NONE privileges). Affected: cJSON before 1.7.11. Remediation: upgrade to 1.7.11 or lat...

CVE-2019-11835

cJSON before 1.7.11 allows out-of-bounds access, related to multiline comments...

PT-2019-12518 · Dave Gamble · Cjson

Name of the Vulnerable Software and Affected Versions: cJSON versions prior to 1.7.11 Description: The issue allows out-of-bounds access, related to multiline comments. Recommendations: For versions prior to 1.7.11, update to version 1.7.11 or later to resolve the issue...