xhtml2pdf Denial of Service via crafted string

An issue in the getcolor function in utils.py of xhtml2pdf v0.2.13 allows attackers to cause a Regular expression Denial of Service ReDOS via supplying a crafted string...

PYSEC-2026-2056 xhtml2pdf Denial of Service via crafted string

An issue in the getcolor function in utils.py of xhtml2pdf v0.2.13 allows attackers to cause a Regular expression Denial of Service ReDOS via supplying a crafted string...

python310-xhtml2pdf-0.2.16-2.1 on GA media (moderate)

python310-xhtml2pdf-0.2.16-2.1 on GA media Announcement ID: openSUSE-SU-2024:14601-1 Rating: moderate Cross-References: CVE-2024-25885 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...

OPENSUSE-SU-2024:14601-1 python310-xhtml2pdf-0.2.16-2.1 on GA media

These are all security issues fixed in the python310-xhtml2pdf-0.2.16-2.1 package on the GA media of openSUSE Tumbleweed...

SUSE CVE-2024-25885

An issue in the getcolor function in utils.py of xhtml2pdf v0.2.13 allows attackers to cause a Regular expression Denial of Service ReDOS via supplying a crafted string...

CVE-2024-25885

A flaw was found in xhtml2pdf’s getcolor function in utils.py. This flaw allows an attacker to trigger a Regular expression Denial of Service ReDOS via specially crafted input...

aequitas (>=0.26.0, <=0.42.0), ap-rss-reader (0.0.3) +32 more potentially affected by CVE-2024-25885 via xhtml2pdf (>=0.0.6, <=0.2.16)

xhtml2pdf PYPI version =0.0.6, =0.26.0, =2.3.1, =0.3.0, =1.0.0, =1.0.0, =1.0.3, =1.0.3, =0.1.2, =0.1.132, =0.1.137 and more Source cves: CVE-2024-25885 Source advisory: SNYK:PYTHON-XHTML2PDF-8171506...

Inefficient Regular Expression Complexity

Overview xhtml2pdf is a PDF generator using HTML and CSS Affected versions of this package are vulnerable to Inefficient Regular Expression Complexity via the use of a crafted string in the getcolor function. PoC html expl = 'rgb00' + '0' 3456 with open"PoC.html", "w" as f: f.writef""" exploit ""...

aequitas (>=0.26.0, <=0.42.0), ap-rss-reader (0.0.3) +32 more potentially affected by CVE-2024-25885 via xhtml2pdf (>=0.0.6, <=0.2.16)

xhtml2pdf PYPI version =0.0.6, =0.26.0, =2.3.1, =0.3.0, =1.0.0, =1.0.0, =1.0.3, =1.0.3, =0.1.2, =0.1.132, =0.1.137 and more Source cves: CVE-2024-25885 Source advisory: GHSA-JJ5C-HHRG-VV5H...

xhtml2pdf Denial of Service via crafted string

An issue in the getcolor function in utils.py of xhtml2pdf v0.2.13 allows attackers to cause a Regular expression Denial of Service ReDOS via supplying a crafted string...

GHSA-JJ5C-HHRG-VV5H xhtml2pdf Denial of Service via crafted string

An issue in the getcolor function in utils.py of xhtml2pdf v0.2.13 allows attackers to cause a Regular expression Denial of Service ReDOS via supplying a crafted string...

aequitas (>=0.26.0, <=0.42.0), ap-rss-reader (0.0.3) +32 more potentially affected by CVE-2024-25885 via xhtml2pdf (>=0.0.6, <=0.2.16)

xhtml2pdf PYPI version =0.0.6, =0.26.0, =2.3.1, =0.3.0, =1.0.0, =1.0.0, =1.0.3, =1.0.3, =0.1.2, =0.1.132, =0.1.137 and more Source cves: CVE-2024-25885 Source advisory: OSV:GHSA-JJ5C-HHRG-VV5H...

DEBIAN-CVE-2024-25885

An issue in the getcolor function in utils.py of xhtml2pdf v0.2.13 allows attackers to cause a Regular expression Denial of Service ReDOS via supplying a crafted string...

CVE-2024-25885

An issue in the getcolor function in utils.py of xhtml2pdf v0.2.13 allows attackers to cause a Regular expression Denial of Service ReDOS via supplying a crafted string...

CVE-2024-25885

An issue in the getcolor function in utils.py of xhtml2pdf v0.2.13 allows attackers to cause a Regular expression Denial of Service ReDOS via supplying a crafted string...

xhtml2pdf security vulnerability

xhtml2pdf is xhtml2pdf open source an HTML to PDF converter using Python, ReportLab Toolkit, html5lib and pypdf. A security vulnerability exists in xhtml2pdf version 0.2.13, which stems from a problem in the getcolor function of utils.py, allowing an attacker to cause a regular expression denial ...

PT-2024-21182

Name of the Vulnerable Software and Affected Versions xhtml2pdf version 0.2.13 Description The issue allows attackers to cause a Regular expression Denial of Service ReDOS via supplying a crafted string to the getcolor function in utils.py. This can be exploited by providing a specifically design...

CVE-2024-25885

The xhtml2pdf PDF generator is vulnerable to a Regular expression Denial of Service (ReDOS) due to inefficient regular expression complexity in the getcolor function located in utils.py . Attackers can exploit this by supplying a specially crafted string, which triggers a condition that causes hi...

CVE-2024-25885: Inefficient Regular Expression Complexity

An issue in the getcolor function in utils.py of xhtml2pdf v0.2.13 allows attackers to cause a Regular expression Denial of Service ReDOS via supplying a crafted string...

CVE-2024-25885

An issue in the getcolor function in utils.py of xhtml2pdf v0.2.13 allows attackers to cause a Regular expression Denial of Service ReDOS via supplying a crafted string...