Threats Tagged 'ghsa-qpf5-3wfw-fh7q'

1 threat

Threats Tagged 'ghsa-qpf5-3wfw-fh7q'
		Signals				Vote and star
High	8.7	EPSS 0.5%	CVE-2026-87819GitPython · Inefficient Regular Expression Complexity High8.7EPSS 0.5%2026-09-09CVE-2026-87819 GitPython versions before 3.1.60 contain a regular expression denial of service (ReDoS) vulnerability in the Actor.name_email_regex component that processes commit author and committer fields. An attacker can craft a commit object with a malformed author field containing an unterminated angle bracket, causing the regex to perform quadratic backtracking. This results in excessive CPU consumption, potentially exhausting resources for over two minutes per commit access. EPSS 0.5%Vulnerability gitpython-developers #ghsa-qpf5-3wfw-fh7q #brew-tach-cve-2026-87819 #homebrew 0	CVE Database V5	2026-09-09	0

Showing 1–1 of 1 result

Stop chasing alerts. Route them.

Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.

Pro Console Lifetime · Custom feeds · Automations: email, Slack, webhooks, SIEM/MISP · API access (baseline limits)