← Back

Configobj Project

configobj_project

1 CVE • 1 product

Products (1)

Click to collapse
Toggle
Configobj
configobj
1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2023-26112
1Configobj Project
1Configobj
Jun 17, 2026
Apr 3, 2023
N/A· v4
5.9 MEDIUM· v3
N/A· v2
All versions of the package configobj are vulnerable to Regular Expression Denial of Service (ReDoS) via the validate function, using (.+?)\((.*)\). **Note:** This is only exploitable in the case of a developer, putting...Show more
All versions of the package configobj are vulnerable to Regular Expression Denial of Service (ReDoS) via the validate function, using (.+?)\((.*)\). **Note:** This is only exploitable in the case of a developer, putting the offending value in a server side configuration file.Show less