Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:33333
HistoryDec 14, 2021 - 8:50 p.m.

Regular Expression Denial Of Service(ReDoS)

2021-12-1420:50:02
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
calibre
vulnerability
html_preprocess_rules
ebooks
conversion
preprocess.py

EPSS

0.002

Percentile

62.2%

calibre is vulnerable to regular expression denial of service(ReDoS). An attacker is able to hang the application via vulnerable html_preprocess_rules in ebooks/conversion/preprocess.py.