tocsin

Alpine/go: high 7.5

Programs which compile regular expressions from untrusted sources may be vulnerable to memory exhaustion or denial of service. The parsed regexp representation is linear in the size of the input, but

Action: Upgrade go to 1.19.2-r0 or later.

Affected

introducedfixedlast affected
1.19.01.19.2-r0-

Fixed versions

1.19.2-r0

Sources

published · modified · JSON