Vulnerabilities

ID
Packages
Summary
Published
arrow_upward
Attributes
GHSA-m5pq-gvj9-9vr8
  • crates.io/regex
Rust's regex crate vulnerable to regular expression denial of service 08 Mar 2022
  • Fix available
  • Severity - 7.5 (High)
CVE-2022-24713
  • Debian:11/firefox-esr
  • Debian:12/firefox-esr
  • Debian:13/firefox-esr
  • Debian:11/rust-regex
  • Debian:12/rust-regex
  • Debian:13/rust-regex
  • Debian:11/thunderbird
  • Debian:12/thunderbird
  • Debian:13/thunderbird
  • github.com/rust-lang/regex
See record for full details 08 Mar 2022
  • Fix available
  • Severity - 7.5 (High)
RUSTSEC-2022-0013
  • crates.io/regex
Regexes with large repetitions on empty sub-expressions take a very long time to parse 08 Mar 2022
  • Fix available
  • Severity - 7.5 (High)