| Package | Affected versions | Patched versions |
|---|---|---|
| international components for unicode | ≤ 3.8.1 |
libicu in International Components for Unicode (ICU) 3.8.1 and earlier attempts to process backreferences to the nonexistent capture group zero (aka \0), which might allow context-dependent attackers to read from, or write to, out-of-bounds memory locations, related to corruption of REStackFrames.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free