Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:36788
HistoryAug 23, 2022 - 3:38 a.m.

Regular Expression Denial Of Service (ReDoS)

2022-08-2303:38:23
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9
eth-account
redos
validation.py
type_regex
insecure regex pattern

EPSS

0.001

Percentile

36.8%

eth-account is vulnerable to regular expression denial of service. The vulnerability exists due to the insecure regex pattern used for the TYPE_REGEX attribute in the validate_types_attribute function of validation.py, allowing an attacker to crash the application by providing a malicious input.

EPSS

0.001

Percentile

36.8%

Related for VERACODE:36788