CVE-2019-16163

HIGH 7.5CVE-2019-16163 · Published 09/09/2019 · updated 17/06/2026

In short

CVE-2019-16163 is a HIGH (CVSS 7.5) vulnerability affecting oniguruma (oniguruma project).
Chance of exploitation in the next 30 days (EPSS): 2.8%, higher than 86.2% of all vulnerabilities.
Fix: update to 6.9.3 or later.

Package	Affected versions	Patched versions
oniguruma oniguruma_project	`< 6.9.3`	`6.9.3`

Oniguruma before 6.9.3 allows Stack Exhaustion in regcomp.c because of recursion in regparse.c.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

< 6.9.3

6.9.3

More vulnerabilities in oniguruma

See all →