CVE-2023-33290
1 advisory.
crates.io/git-url-parse CVE-2023-33290: low, EPSS 0.76%
git-url-parse crate vulnerable to Regular Expression Denial of Service
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 0.4.4 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-qfh9-8p57-mjjj
- https://nvd.nist.gov/vuln/detail/CVE-2023-33290
- https://github.com/tjtelan/git-url-parse-rs/issues/51
- https://github.com/tjtelan/git-url-parse-rs
- https://github.com/tjtelan/git-url-parse-rs/blob/main/src/lib.rs#L396
CVE-2023-33290 · published · modified · JSON