https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T17:03:04.154128+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2022-39280 CVE-2022-39280 — Regular expression denial of service in dparse 2026-10-09T17:03:04.171264+00:00

Affected: pyupio dparse

dparse is a parser for Python dependency files. dparse in versions before 0.5.2 contain a regular expression that is vulnerable to a Regular Expression Denial of Service. All the users parsing index server URLs with dparse are impacted by this vulnerability. A patch has been applied in version `0.5.2`, all the users are advised to upgrade to `0.5.2` as soon as possible. Users unable to upgrade should avoid passing index server URLs in the source file to be parsed.