https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 21 Oct 2026 09:54:46 +0000 https://cve.radiocsirt.org/vuln/cnvd-2018-15753 cnvd-2018-15753 https://cve.radiocsirt.org/vuln/cnvd-2018-15753 https://cve.radiocsirt.org/vuln/euvd-2026-167126 EUVD-2026-167126 https://cve.radiocsirt.org/vuln/euvd-2026-167126 https://cve.radiocsirt.org/vuln/fkie_cve-2017-16098 <p>charset 1.0.0 and below are vulnerable to regular expression denial of service. Input of around 50k characters is required for a slow down of around 2 seconds. Unless node was compiled using the -DHTTP_MAX_HEADER_SIZE= option the default header max length is 80kb, so the impact of the ReDoS is relatively low.</p> <p>charset 1.0.0 and below are vulnerable to regular expression denial of service. Input of around 50k characters is required for a slow down of around 2 seconds. Unless node was compiled using the -DHTTP_MAX_HEADER_SIZE= option the default header max length is 80kb, so the impact of the ReDoS is relatively low.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2017-16098 https://cve.radiocsirt.org/vuln/ghsa-9cp3-fh5x-xfcj <p><strong>Affected:</strong> npm: charset</p> <p>Affected versions of `charset` are susceptible to a regular expression denial of service.</p> <p>The amplification on this vulnerability is relatively low - it takes around 2 seconds for the engine to execute on a malicious input which is 50,000 characters in length.</p> <p>If node was compiled using the `-DHTTP_MAX_HEADER_SIZE` however, the impact of the vulnerability can be significant, as the primary limitation for the vulnerability is the default max HTTP header length in node.</p> <p>## Recommendation</p> <p>Update to version 1.0.1 or later.</p> <p><strong>Affected:</strong> npm: charset</p> <p>Affected versions of `charset` are susceptible to a regular expression denial of service.</p> <p>The amplification on this vulnerability is relatively low - it takes around 2 seconds for the engine to execute on a malicious input which is 50,000 characters in length.</p> <p>If node was compiled using the `-DHTTP_MAX_HEADER_SIZE` however, the impact of the vulnerability can be significant, as the primary limitation for the vulnerability is the default max HTTP header length in node.</p> <p>## Recommendation</p> <p>Update to version 1.0.1 or later.</p> https://cve.radiocsirt.org/vuln/ghsa-9cp3-fh5x-xfcj https://cve.radiocsirt.org/vuln/gsd-2017-16098 gsd-2017-16098 https://cve.radiocsirt.org/vuln/gsd-2017-16098