Lucene search
+L

2 matches found

Github Security Blog
Github Security Blog
•added 2026/09/08 8:51 p.m.•20 views

Colord: Slow rejection of oversized malformed color strings

Impact colord's CSS color string matchers described a number as +-?\d.?\d+. In that form \d and \d+ can match the same digits, so a run of n digits can be divided between them in On² ways, and rejecting an input retries every division. Parsing is synchronous and uninterruptible, so a long...

6.9CVSS5.8AI score0.00507EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder