https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 23:31:13 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-184020 EUVD-2026-184020 https://cve.radiocsirt.org/vuln/euvd-2026-184020 https://cve.radiocsirt.org/vuln/fkie_cve-2021-23354 <p>The package printf before 0.6.1 are vulnerable to Regular Expression Denial of Service (ReDoS) via the regex string /\%(?:\(([\w_.]+)\)|([1-9]\d*)\$)?([0 +\-\]*)(\*|\d+)?(\.)?(\*|\d+)?[hlL]?([\%bscdeEfFgGioOuxX])/g in lib/printf.js. The vulnerable regular expression has cubic worst-case time complexity.</p> <p>The package printf before 0.6.1 are vulnerable to Regular Expression Denial of Service (ReDoS) via the regex string /\%(?:\(([\w_.]+)\)|([1-9]\d*)\$)?([0 +\-\]*)(\*|\d+)?(\.)?(\*|\d+)?[hlL]?([\%bscdeEfFgGioOuxX])/g in lib/printf.js. The vulnerable regular expression has cubic worst-case time complexity.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-23354 https://cve.radiocsirt.org/vuln/ghsa-xfhp-gmh8-r8v2 <p><strong>Affected:</strong> npm: printf</p> <p>The package printf before 0.6.1 are vulnerable to Regular Expression Denial of Service (ReDoS) via the regex string ```regex /\%(?:\(([\w_.]+)\)|([1-9]\d*)\$)?([0 +\-\]*)(\*|\d+)?(\.)?(\*|\d+)?[hlL]?([\%bscdeEfFgGioOuxX])/g ``` in `lib/printf.js`. The vulnerable regular expression has cubic worst-case time complexity.</p> <p><strong>Affected:</strong> npm: printf</p> <p>The package printf before 0.6.1 are vulnerable to Regular Expression Denial of Service (ReDoS) via the regex string ```regex /\%(?:\(([\w_.]+)\)|([1-9]\d*)\$)?([0 +\-\]*)(\*|\d+)?(\.)?(\*|\d+)?[hlL]?([\%bscdeEfFgGioOuxX])/g ``` in `lib/printf.js`. The vulnerable regular expression has cubic worst-case time complexity.</p> https://cve.radiocsirt.org/vuln/ghsa-xfhp-gmh8-r8v2 https://cve.radiocsirt.org/vuln/gsd-2021-23354 gsd-2021-23354 https://cve.radiocsirt.org/vuln/gsd-2021-23354