~ / search / GHSA-hg3w-7hj9-m3f7

GHSA-hg3w-7hj9-m3f7

Regular expression denial of service in url_regex

Source: GitHub Advisory Database (reviewed) Moderate CVE-2022-21195

Packages

EcosystemPackageAffectedFixed in
PyPI url_regex <= 1.0.4 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

All versions of package url-regex are vulnerable to Regular Expression Denial of Service (ReDoS) which can cause the CPU usage to crash.

References

External links from the advisory. They lead to third-party sites.