~ / search / GHSA-cmhx-cq75-c4mj

GHSA-cmhx-cq75-c4mj

Regular Expression Denial of Service in System.Text.RegularExpressions

Source: GitHub Advisory Database (reviewed) High CVE-2019-0820

Packages

EcosystemPackageAffectedFixed in
NuGet System.Text.RegularExpressions >= 4.3.0, < 4.3.1 4.3.1

Details

As written in the advisory (Markdown source, shown as plain text).

A denial of service vulnerability exists when .NET Framework and .NET Core improperly process RegEx strings, aka '.NET Framework and .NET Core Denial of Service Vulnerability'. This CVE ID is unique from CVE-2019-0980, CVE-2019-0981.

References

External links from the advisory. They lead to third-party sites.