https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 20 Oct 2026 05:13:15 +0000 https://cve.radiocsirt.org/vuln/cnvd-2019-01758 cnvd-2019-01758 https://cve.radiocsirt.org/vuln/cnvd-2019-01758 https://cve.radiocsirt.org/vuln/euvd-2026-179675 EUVD-2026-179675 https://cve.radiocsirt.org/vuln/euvd-2026-179675 https://cve.radiocsirt.org/vuln/fkie_cve-2017-16117 <p>slug is a module to slugify strings, even if they contain unicode. slug is vulnerable to regular expression denial of service is specially crafted untrusted input is passed as input. About 50k characters can block the event loop for 2 seconds.</p> <p>slug is a module to slugify strings, even if they contain unicode. slug is vulnerable to regular expression denial of service is specially crafted untrusted input is passed as input. About 50k characters can block the event loop for 2 seconds.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2017-16117 https://cve.radiocsirt.org/vuln/ghsa-jxqq-cqm6-pfq9 <p><strong>Affected:</strong> npm: slug</p> <p>Affected versions of `slug` are vulnerable to a regular expression denial of service when parsing untrusted user input.</p> <p>The issue is low severity, as it takes 50,000 characters to cause the event loop to block for 2 seconds,</p> <p>About 50k characters can block the event loop for 2 seconds.</p> <p>## Recommendation</p> <p>Update to version 0.9.2 or later.</p> <p><strong>Affected:</strong> npm: slug</p> <p>Affected versions of `slug` are vulnerable to a regular expression denial of service when parsing untrusted user input.</p> <p>The issue is low severity, as it takes 50,000 characters to cause the event loop to block for 2 seconds,</p> <p>About 50k characters can block the event loop for 2 seconds.</p> <p>## Recommendation</p> <p>Update to version 0.9.2 or later.</p> https://cve.radiocsirt.org/vuln/ghsa-jxqq-cqm6-pfq9 https://cve.radiocsirt.org/vuln/gsd-2017-16117 gsd-2017-16117 https://cve.radiocsirt.org/vuln/gsd-2017-16117