Closed felipemfp closed 5 years ago
Vulnerable versions: < 2.6.9 Patched version: 2.6.9
< 2.6.9
2.6.9
The debug module is vulnerable to regular expression denial of service when untrusted user input is passed into the o formatter. It takes around 50k characters to block for 2 seconds making this a low severity issue.
Possibly related: #316
Description
CVE-2017-16137 More information
Vulnerable versions:
< 2.6.9Patched version:2.6.9The debug module is vulnerable to regular expression denial of service when untrusted user input is passed into the o formatter. It takes around 50k characters to block for 2 seconds making this a low severity issue.