CVE-2023-25166
Regular Expression Denial of Service (ReDoS) Vulnerability
Résumé
Regular Expression Denial of Service (ReDoS) Vulnerability
Description d'origine
La description telle que publiée par la source (souvent en anglais).
formula is a math and string formula parser. In versions prior to 3.0.1 crafted user-provided strings to formula's parser might lead to polynomial execution time and a denial of service. Users should upgrade to 3.0.1+. There are no known workarounds for this vulnerability.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com