{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"1.0.4"}],"component":"url-regex","cve_ids":["CVE-2022-21195"],"ecosystem":"PyPI","epss":0.01361,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-hg3w-7hj9-m3f7","id":"tcs_01M5KFKHXQNBPNGTKWTQ2E4Z5B","modified_at":"2026-03-13T21:56:30.037527Z","published_at":"2022-05-21T00:00:25Z","references":["https://osv.dev/vulnerability/GHSA-hg3w-7hj9-m3f7","https://nvd.nist.gov/vuln/detail/CVE-2022-21195","https://github.com/AlexFlipnote/url_regex","https://github.com/AlexFlipnote/url_regex/blob/master/url_regex/url_regex.py","https://snyk.io/vuln/SNYK-PYTHON-URLREGEX-2347643"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-hg3w-7hj9-m3f7","url":"https://osv.dev/vulnerability/GHSA-hg3w-7hj9-m3f7"}],"summary":"Regular expression denial of service in url_regex"}