OSV-2026-1084

See a problem?
JSON Data
https://api.osv.dev/v1/vulns/OSV-2026-1084
Published
2026-07-28T07:31:40Z
Modified
2026-07-28T07:31:40Z
Summary
UNKNOWN READ in bytes1_char_at
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=536956124

Crash type: UNKNOWN READ
Crash state:
bytes1_char_at
basic_match
do_best_fuzzy_match
References

Affected packages

PyPI / mrab-regex

Package

Name
mrab-regex
View open source insights on deps.dev
Purl
pkg:pypi/mrab-regex

Affected ranges

Type
GIT
Repo
https://github.com/mrabarnett/mrab-regex
Events
Introduced
07dfa3b6b2d5a30919ac8564c1542a4487d40f8e
Fixed
0e8cb0596ba6572c66e5d153a1d7c901b381e15e

Affected versions

2026.*
2026.7.19
2026.8.12
2026.8.30
2026.8.31
2026.9.1
2026.9.2
2026.9.3
2026.9.9
2026.9.10
2026.9.19

Ecosystem specific 

{
    "severity":  "MEDIUM"
}

Database specific

introduced_range 
"e7716da67cc2de8a7aaed4f7f1d37688fa480644:0525affc5309f8d53deac351e4926b11eb8a282c"
source 
"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/mrab-regex/OSV-2026-1084.yaml"