Lucene search
+L

9 matches found

PyPA
PyPA
•added 2026/09/10 9:44 a.m.•19 views

eml_parser vulnerable to DoS via deeply nested parens in Received headers

Summaryemlparser strips parenthesised CFWS comments from Received: headers using a regex-based fix-point loop. The loop has quadratic time complexity in the number of nested parens. A single Received: header containing 5,000 nested parens causes 1.3 seconds of CPU saturation per parsed message;...

7.5CVSS5.7AI score0.0063EPSS
SaveExploits0References8Affected Software1
Rows per page
Query Builder