Regular Expression Denial Of Service (ReDoS)

2023-01-1901:46:24

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

globalid

vulnerability

redos

model parsing

processing time

0.001 Low

EPSS

Percentile

33.8%

JSON

globalid is vulnerable to Regular Expression Denial of Service (ReDoS) attacks. The vulnerability exists in the model name parsing section of the library, which allows an attacker to significantly slow down the processing time via passing a carefully crafted input.

CPENameOperatorVersion
globalidle1.0.0
globalidle0.3.0
globalidle1.0.0
globalidle0.3.0
ruby-globalid:sideq0.4.2+REALLY.0.3.6-1
ruby-globalid:bookwormeq0.4.2+REALLY.0.3.6-1