Lucene search
K

7 matches found

Github Security Blog
Github Security Blog
added 2024/03/19 6:30 a.m.45 views

Black vulnerable to Regular Expression Denial of Service (ReDoS)

Versions of the package black before 24.3.0 are vulnerable to Regular Expression Denial of Service ReDoS via the lineswithleadingtabsexpanded function in the strings.py file. An attacker could exploit this vulnerability by crafting a malicious input that causes a denial of service. Exploiting thi...

5.3CVSS6.9AI score0.00081EPSS
Exploits0References6Affected Software1
OSV
OSV
added 2024/03/19 5:15 a.m.18 views

CVE-2024-21503

Versions of the package black before 24.3.0 are vulnerable to Regular Expression Denial of Service ReDoS via the lineswithleadingtabsexpanded function in the strings.py file. An attacker could exploit this vulnerability by crafting a malicious input that causes a denial of service. Exploiting thi...

5.3CVSS6.9AI score
Exploits0References3
Vulnrichment
Vulnrichment
added 2024/03/19 5:0 a.m.24 views

CVE-2024-21503

Versions of the package black before 24.3.0 are vulnerable to Regular Expression Denial of Service ReDoS via the lineswithleadingtabsexpanded function in the strings.py file. An attacker could exploit this vulnerability by crafting a malicious input that causes a denial of service. Exploiting thi...

5.3CVSS6.5AI score0.00081EPSS
Exploits0References3
Cvelist
Cvelist
added 2024/03/19 5:0 a.m.20 views

CVE-2024-21503

Versions of the package black before 24.3.0 are vulnerable to Regular Expression Denial of Service ReDoS via the lineswithleadingtabsexpanded function in the strings.py file. An attacker could exploit this vulnerability by crafting a malicious input that causes a denial of service. Exploiting thi...

5.3CVSS5.4AI score0.00081EPSS
Exploits0References3
CVE
CVE
added 2024/03/19 5:0 a.m.309 views

CVE-2024-21503

CVE-2024-21503 affects Black prior to 24.3.0. The vulnerability is a Regular Expression Denial of Service (ReDoS) in strings.py lines_with_leading_tabs_expanded, exploitable when Black processes untrusted input or inputs with thousands of leading tabs. Affected: Python Black package (versions bef...

5.3CVSS5AI score0.00081EPSS
Exploits0References3
AlpineLinux
AlpineLinux
added 2024/03/19 5:0 a.m.53 views

CVE-2024-21503

Versions of the package black before 24.3.0 are vulnerable to Regular Expression Denial of Service ReDoS via the lineswithleadingtabsexpanded function in the strings.py file. An attacker could exploit this vulnerability by crafting a malicious input that causes a denial of service. Exploiting thi...

5.3CVSS5.1AI score0.00081EPSS
Exploits0
UbuntuCve
UbuntuCve
added 2024/03/19 12:0 a.m.28 views

CVE-2024-21503

Versions of the package black before 24.3.0 are vulnerable to Regular Expression Denial of Service ReDoS via the lineswithleadingtabsexpanded function in the strings.py file. An attacker could exploit this vulnerability by crafting a malicious input that causes a denial of service. Exploiting thi...

5.3CVSS6.8AI score0.00081EPSS
Exploits0References4
Rows per page
Query Builder