GHSA-39mj-fpg2-3jrg
Suggest an improvement- Source
- https://github.com/advisories/GHSA-39mj-fpg2-3jrg
- Import Source
- https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-39mj-fpg2-3jrg/GHSA-39mj-fpg2-3jrg.json
- JSON Data
- https://api.osv.dev/v1/vulns/GHSA-39mj-fpg2-3jrg
- Aliases
- Withdrawn
- 2023-08-07T20:56:50Z
- Published
- 2022-05-24T17:44:46Z
- Modified
- 2026-09-10T03:49:07Z
- Severity
-
- 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
- Summary
- StackStorm st2 Infinite Loop Condition
- Details
-
StackStorm before 3.4.1, in some situations, has an infinite loop that consumes all available memory and disk space. This can occur if Python 3.x is used, the locale is not utf-8, and there is an attempt to log Unicode data (from an action or rule name).
- Database specific
{ "cwe_ids": [ "CWE-835" ], "github_reviewed": true, "github_reviewed_at": "2023-07-10T22:59:05Z", "nvd_published_at": "2021-03-18T03:15:00Z", "severity": "HIGH" }- References
Affected packages
PyPI / st2client
Package
- Name
- st2client
- View open source insights on deps.dev
- Purl
- pkg:pypi/st2client
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affectedFixed3.4.1
Affected versions
0.*
0.5.1
0.7
0.8.0
0.9.0.9
0.9.0.11
0.11.5.13
0.12.0.3
0.12.1.5
0.12.2.6
0.13.0.3
0.13.1.4
0.13.2.5
1.*
1.1.0.5
1.1.1.8
1.2.0.8
1.3.0.9
1.3.0.10
1.3.0.11
1.3.0.12
1.3.1.13
1.3.1.15
1.3.2.16
1.4.0.8
1.5.0
1.5.1
1.6.0
2.*
2.0.0
2.0.1
2.1.0
2.2.0
2.2.1
2.3.0
2.4.1
2.5.0
2.5.1
2.6.0
2.7.0
2.7.1
2.7.2
2.8.0
2.8.1
2.9.0
2.9.1
2.9.2
2.10.0
2.10.1
2.10.2
2.10.3
2.10.4
3.*
3.0.0
3.0.1
3.1.0
3.2.0
3.3.0
3.4.0