3 matches found
EUVD-2023-1335
Malicious code in bioql PyPI...
7.5CVSS8.1AI score0.01229EPSS
SaveExploits1References10
Design/Logic Flaw
Versions of the package deno before 1.31.0 are vulnerable to Regular Expression Denial of Service ReDoS due to the upgradeWebSocket function, which contains regexes in the form of /s,s/, used for splitting the Connection/Upgrade header. A specially crafted Connection/Upgrade header can be used to...
5CVSS7.5AI score0.01229EPSS
SaveExploits1References5Affected Software1
CVE-2023-26103
Versions of the package deno before 1.31.0 are vulnerable to Regular Expression Denial of Service ReDoS due to the upgradeWebSocket function, which contains regexes in the form of /s,s/, used for splitting the Connection/Upgrade header. A specially crafted Connection/Upgrade header can be used to...
5.3CVSS7.7AI score0.01229EPSS
SaveExploits1References5
20