| Package | Affected versions | Patched versions |
|---|---|---|
| urlnorm | ≤ 0.1.4 |
The urlnorm crate through 0.1.4 for Rust allows Regular Expression Denial of Service (ReDos) via a crafted URL to lib.rs. NOTE: the Supplier disputes this, taking the position that "Slow printing of URLs is not a CVE."
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free