Lucene search
+L

11 matches found

PyPA
PyPA
•added 2026/07/13 3:02 p.m.•39 views

Giskard has a Regular Expression Denial of Service (ReDoS) in RegexMatching Check

SummaryThe RegexMatching check in the giskard-checks package passes a user-supplied regular expression pattern directly to Python's re.search without any timeout, complexity guard, or pattern validation. An attacker who can control the regex pattern or the text being matched can craft inputs that...

5.5CVSS5.8AI score0.00149EPSS
SaveExploits0References6Affected Software1
Rows per page
Query Builder