CVE-2025-58050
1 advisory.
PyPI/pcre2 CVE-2025-58050: critical 9.1, EPSS 0.80%
The PCRE2 library is a set of C functions that implement regular expression pattern matching. In version 10.45, a heap-buffer-overflow read vulnerability exists in the PCRE2 regular expression matchin
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 10.45 |
Fixed versions
No fixed version in the source.
Sources
- osv: PYSEC-2025-259
- https://github.com/PCRE2Project/pcre2/releases/tag/pcre2-10.46
- https://github.com/PCRE2Project/pcre2/commit/a141712e5967d448c7ce13090ab530c8e3d82254
- https://github.com/PCRE2Project/pcre2/security/advisories/GHSA-c2gv-xgf5-5cc2
CVE-2025-58050 · published · modified · JSON