Regular Expression Denial Of Service (ReDoS)

2022-05-2307:08:38

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.001 Low

EPSS

Percentile

32.1%

JSON

url_regex is vulnerable to regular expression denial of service. The vulnerability exists due to a lack of sanitization which allows an attacker to cause an application crash via cpu usage.

CPENameOperatorVersion
url-regexle1.0.4
url-regexle1.0.4

CPE	Name	Operator	Version
	url-regex	le	1.0.4
	url-regex	le	1.0.4

References

github.com/advisories/GHSA-hg3w-7hj9-m3f7

github.com/AlexFlipnote/url_regex/blob/master/url_regex/url_regex.py

0.001 Low

EPSS

Percentile

32.1%

JSON

Related for VERACODE:35643