CVE-2026-121577 Unescaped header separators in whatstk build a regular expression that backtracks exponentially

Inefficient Regular Expression Complexity CWE-1333 in generateregex whatstk/whatsapp/parser.py in whatstk from 0.2.0 before 0.9.0 allows a party that supplies a chat export to consume the CPU of the process that parses it for an unbounded time, because the function builds the header regular...

EUVD-2026-116196

Inefficient Regular Expression Complexity CWE-1333 in generateregex whatstk/whatsapp/parser.py in whatstk from 0.2.0 before 0.9.0 allows a party that supplies a chat export to consume the CPU of the process that parses it for an unbounded time, because the function builds the header regular...

CVE-2026-121577

The whatstk library (versions 0.2.0 through 0.9.0) is vulnerable to Inefficient Regular Expression Complexity (CWE-1333) in the generate_regex() function located in whatstk/whatsapp/parser.py. The vulnerability arises because the function constructs a header regular expression by replacing %x cod...

CVE-2026-121564

Incomplete Comparison with Missing Factors CWE-1023 in mergechats whatstk/utils/chatmerge.py, reached from BaseChat.merge, in whatstk from 0.3.0 before 0.9.0 allows a party that supplies the chat exports to cause messages to be absent from the merged output with no indication that anything was...

EUVD-2026-115913

Incomplete Comparison with Missing Factors CWE-1023 in mergechats whatstk/utils/chatmerge.py, reached from BaseChat.merge, in whatstk from 0.3.0 before 0.9.0 allows a party that supplies the chat exports to cause messages to be absent from the merged output with no indication that anything was...

CVE-2026-121564

The whatstk library (versions 0.3.0 before 0.9.0 ) is vulnerable to a silent loss of messages during chat export merging via CWE-1023 . The issue resides in the merge_chats() function within whatstk/utils/chat_merge.py, which is reachable from BaseChat.merge(). Because the logic compares date ran...

CVE-2026-121564 Silent loss of messages when merging overlapping chat exports in whatstk

Incomplete Comparison with Missing Factors CWE-1023 in mergechats whatstk/utils/chatmerge.py, reached from BaseChat.merge, in whatstk from 0.3.0 before 0.9.0 allows a party that supplies the chat exports to cause messages to be absent from the merged output with no indication that anything was...

CVE-2026-121564: lucasrodes whatstk: Incomplete Comparison with Missing Factors (CWE-1023) in merge_chats() (whatstk/utils/chat_merge.py), reached from…

Incomplete Comparison with Missing Factors CWE-1023 in mergechats whatstk/utils/chatmerge.py, reached from BaseChat.merge, in whatstk from 0.3.0 before 0.9.0 allows a party that supplies the chat exports to cause messages to be absent from the merged output with no indication that anything was...

CVE-2026-121577: lucasrodes whatstk: Inefficient Regular Expression Complexity (CWE-1333) in generate_regex() (whatstk/whatsapp/parser.py) in whatstk from…

Inefficient Regular Expression Complexity CWE-1333 in generateregex whatstk/whatsapp/parser.py in whatstk from 0.2.0 before 0.9.0 allows a party that supplies a chat export to consume the CPU of the process that parses it for an unbounded time, because the function builds the header regular...