Lucene search
+L

490 matches found

NVD
NVD
•added 2026/11/03 8:18 p.m.•11 views

CVE-2026-121577

Inefficient Regular Expression Complexity CWE-1333 in generateregex whatstk/whatsapp/parser.py in whatstk from 0.2.0 before 0.9.0 allows a party that supplies a chat export to consume the CPU of the process that parses it for an unbounded time, because the function builds the header regular...

6.7CVSS0.00129EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/11/03 7:52 p.m.•26 views

CVE-2026-121577 Unescaped header separators in whatstk build a regular expression that backtracks exponentially

Inefficient Regular Expression Complexity CWE-1333 in generateregex whatstk/whatsapp/parser.py in whatstk from 0.2.0 before 0.9.0 allows a party that supplies a chat export to consume the CPU of the process that parses it for an unbounded time, because the function builds the header regular...

6.7CVSS0.00129EPSS
SaveExploits0References4
Mend
Mend
•added 2026/11/03 7:52 p.m.•8 views

CVE-2026-121577

Inefficient Regular Expression Complexity CWE-1333 in generateregex whatstk/whatsapp/parser.py in whatstk from 0.2.0 before 0.9.0 allows a party that supplies a chat export to consume the CPU of the process that parses it for an unbounded time, because the function builds the header regular...

6.7CVSS5.9AI score0.00129EPSS
SaveExploits0References5
osv_cve
osv_cve
•added 2026/11/03 7:52 p.m.•11 views

CVE-2026-121577 Unescaped header separators in whatstk build a regular expression that backtracks exponentially

Inefficient Regular Expression Complexity CWE-1333 in generateregex whatstk/whatsapp/parser.py in whatstk from 0.2.0 before 0.9.0 allows a party that supplies a chat export to consume the CPU of the process that parses it for an unbounded time, because the function builds the header regular...

6.7CVSS5.9AI score
SaveExploits0References8
CVE
CVE
•added 2026/11/03 7:52 p.m.•19 views

CVE-2026-121577

The whatstk library (versions 0.2.0 through 0.9.0) is vulnerable to Inefficient Regular Expression Complexity (CWE-1333) in the generate_regex() function located in whatstk/whatsapp/parser.py. The vulnerability arises because the function constructs a header regular expression by replacing %x cod...

6.7CVSS5.9AI score0.00129EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/11/03 12:00 a.m.•10 views

CVE-2026-121577: lucasrodes whatstk: Inefficient Regular Expression Complexity (CWE-1333) in generate_regex() (whatstk/whatsapp/parser.py) in whatstk from…

Inefficient Regular Expression Complexity CWE-1333 in generateregex whatstk/whatsapp/parser.py in whatstk from 0.2.0 before 0.9.0 allows a party that supplies a chat export to consume the CPU of the process that parses it for an unbounded time, because the function builds the header regular...

6.7CVSS5.9AI score0.00129EPSS
SaveExploits0References2
IBM Security Bulletins
IBM Security Bulletins
•added 2026/11/02 2:03 p.m.•21 views

Security Bulletin: Vulnerability in linkify-it affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.

Summary Potential vulnerability in linkify-it has been identified that affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component. . The vulnerability have been addressed. Refer to details for additional information...

8.7CVSS6.2AI score0.00394EPSS
SaveExploits1Affected Software2
NVD
NVD
•added 2026/11/01 7:17 a.m.•20 views

CVE-2026-120217

A vulnerability was detected in Delgan loguru 0.7.3. The affected element is the function AnsiParser.feed of the file loguru/colorizer.py of the component ANSI Color-Markup Parser. Performing a manipulation results in inefficient regular expression complexity. The attack is possible to be carried...

5.3CVSS0.00271EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/11/01 6:15 a.m.•16 views

EUVD-2026-114785

A vulnerability was detected in Delgan loguru 0.7.3. The affected element is the function AnsiParser.feed of the file loguru/colorizer.py of the component ANSI Color-Markup Parser. Performing a manipulation results in inefficient regular expression complexity. The attack is possible to be carried...

5.3CVSS5AI score0.00271EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/11/01 12:00 a.m.•18 views

PT-2026-134834

A vulnerability was detected in Delgan loguru 0.7.3. The affected element is the function AnsiParser.feed of the file loguru/ colorizer.py of the component ANSI Color-Markup Parser. Performing a manipulation results in inefficient regular expression complexity. The attack is possible to be carrie...

5.3CVSS5.1AI score0.00271EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/11/01 12:00 a.m.•19 views

CVE-2026-120217: Delgan loguru: A vulnerability was detected in Delgan loguru 0.7.3

A vulnerability was detected in Delgan loguru 0.7.3. The affected element is the function AnsiParser.feed of the file loguru/colorizer.py of the component ANSI Color-Markup Parser. Performing a manipulation results in inefficient regular expression complexity. The attack is possible to be carried...

5.3CVSS5.1AI score0.00271EPSS
SaveExploits0References3
NVD
NVD
•added 2026/10/22 8:17 p.m.•19 views

CVE-2026-115508

Crawl4AI 0.7.0 before 0.9.5 contains an inefficient regular expression complexity vulnerability in the Docker API server that allows authenticated API clients to supply unbounded regular expressions in /crawl request bodies. Attackers can submit catastrophic-backtracking patterns via...

7.1CVSS0.00459EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/10/22 7:14 p.m.•19 views

EUVD-2026-108340

Crawl4AI 0.7.0 before 0.9.5 contains an inefficient regular expression complexity vulnerability in the Docker API server that allows authenticated API clients to supply unbounded regular expressions in /crawl request bodies. Attackers can submit catastrophic-backtracking patterns via...

7.1CVSS5.8AI score0.00459EPSS
SaveExploits0References5
Mend
Mend
•added 2026/10/22 7:14 p.m.•42 views

CVE-2026-115508

Crawl4AI 0.7.0 before 0.9.5 contains an inefficient regular expression complexity vulnerability in the Docker API server that allows authenticated API clients to supply unbounded regular expressions in /crawl request bodies. Attackers can submit catastrophic-backtracking patterns via...

7.1CVSS5.8AI score0.00459EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/10/22 12:00 a.m.•18 views

PT-2026-121582

Crawl4AI 0.7.0 before 0.9.5 contains an inefficient regular expression complexity vulnerability in the Docker API server that allows authenticated API clients to supply unbounded regular expressions in /crawl request bodies. Attackers can submit catastrophic-backtracking patterns via...

7.1CVSS5.9AI score0.00459EPSS
SaveExploits0References6
SUSE CVE
SUSE CVE
•added 2026/10/20 11:42 p.m.•23 views

SUSE CVE-2026-112300

A vulnerability was identified in DiffSK configobj up to 5.0.9. Affected by this vulnerability is the function sectionmarker of the file configobj/init.py. The manipulation leads to inefficient regular expression complexity. Remote exploitation of the attack is possible. The project was informed ...

5.3CVSS5.1AI score0.00534EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/10/20 12:00 a.m.•19 views

Linux Distros Unpatched Vulnerability : CVE-2026-112300

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was identified in DiffSK configobj up to 5.0.9. Affected by this vulnerability is the function sectionmarker of the file configobj/init.py. The...

6.9CVSS5.2AI score0.00534EPSS
SaveExploits0References4
NVD
NVD
•added 2026/10/19 9:17 p.m.•14 views

CVE-2026-112300

A vulnerability was identified in DiffSK configobj up to 5.0.9. Affected by this vulnerability is the function sectionmarker of the file configobj/init.py. The manipulation leads to inefficient regular expression complexity. Remote exploitation of the attack is possible. The project was informed ...

6.9CVSS0.00534EPSS
SaveExploits0References6
osv_azl
osv_azl
•added 2026/10/19 9:17 p.m.•32 views

AZL-110064 CVE-2026-112300 affecting package python-configobj 5.0.6-7

A vulnerability was identified in DiffSK configobj up to 5.0.9. Affected by this vulnerability is the function sectionmarker of the file configobj/init.py. The manipulation leads to inefficient regular expression complexity. Remote exploitation of the attack is possible. The project was informed ...

6.9CVSS5.1AI score0.00534EPSS
SaveExploits0References1
osv_debian
osv_debian
•added 2026/10/19 9:17 p.m.•24 views

DEBIAN-CVE-2026-112300

A vulnerability was identified in DiffSK configobj up to 5.0.9. Affected by this vulnerability is the function sectionmarker of the file configobj/init.py. The manipulation leads to inefficient regular expression complexity. Remote exploitation of the attack is possible. The project was informed ...

6.9CVSS5.1AI score0.00534EPSS
SaveExploits0References1
Rows per page
Query Builder