Threats tagged 'ghsa-r925-mgvr-h9cc'

A Regular Expression Denial of Service (ReDoS) vulnerability exists in Symfony's HeaderUtils::split() method, reachable via the Cache-Control HTTP request header. The vulnerability arises from a regex pattern that inefficiently handles whitespace, causing exponential backtracking and high CPU usage when processing crafted headers. This can lead to significant request processing delays or dropped header directives. Fixed versions are available starting from 5.4.54, 6.4.46, 7.4.19, and 8.1.7.