Lucene search
+L

18 matches found

OSV
OSV
•added 2026/10/01 9:33 a.m.•2 views

BIT-RABBITMQ-2026-67240 RabbitMQ: ReDoS via AMQP 1.0 SQL filter LIKE wildcard

RabbitMQ is a messaging and streaming broker. Prior to versions 4.2.7 and 4.3.1, patterntoregex maps % - .? and - ., then compiles ^...$ with only unicode; re:run is called with only capture, none - no explicit matchlimit. A pattern like %%...%X becomes ^.?..?.....?.X$ with overlapping lazy...

2.3CVSS5.9AI score0.00259EPSS
SaveExploits0References4
Rows per page
Query Builder