CVE-2021-45470

ALTO 7.5CVE-2021-45470 · Published 23/12/2021 · updated 17/06/2026

In breve

CVE-2021-45470 è una vulnerabilità ALTO (CVSS 7.5) che riguarda cve-search (circl).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.9%, superiore al 80.1% delle vulnerabilità.
Correzione: aggiornare a 4.1.0 o successiva.

Package	Affected versions	Patched versions
cve-search circl	`< 4.1.0`	`4.1.0`

Description

lib/DatabaseLayer.py in cve-search before 4.1.0 allows regular expression injection, which can lead to ReDoS (regular expression denial of service) or other impacts.

References

cve-search/cve-search commit c621f9f · Patch
cve-search/cve-search · Third Party Advisory
cve-search/cve-search#629 · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free