Lucene search
+L

2 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/20 12:00 a.m.•7 views

CVE-2024-10955: Inefficient Regular Expression Complexity

A Regular Expression Denial of Service ReDoS vulnerability exists in gaizhenbiao/chuanhuchatgpt, as of commit 20b2e02. The server uses the regex pattern r'+' to parse user input. In Python's default regex engine, this pattern can take polynomial time to match certain crafted inputs. An attacker c...

6.5CVSS6.5AI score0.00744EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/03/20 12:00 a.m.•8 views

PT-2025-12085

Name of the Vulnerable Software and Affected Versions gaizhenbiao/chuanhuchatgpt affected versions not specified Description A Regular Expression Denial of Service ReDoS issue exists due to the server using the regex pattern r'+' to parse user input. This pattern can take polynomial time to match...

6.5CVSS6.5AI score0.00744EPSS
SaveExploits1References5
Rows per page
Query Builder