Regular Expression Denial of Service in flask-restx

ALTO 7.5CVE-2021-32838 · GHSA-3q6g-vf58-7m4g · PYSEC-2021-325 · Published 20/09/2021 · updated 17/06/2026

Em resumo

CVE-2021-32838 é uma vulnerabilidade ALTO (CVSS 7.5) que afeta flask-restx, flask-restx (flask-restx project).
Chance de exploração nos próximos 30 dias (EPSS): 1.9%, maior que 79.4% das vulnerabilidades.
Correção: atualize para 0.5.1 ou posterior.

Package	Affected versions	Patched versions
flask-restx PyPI	`< 0.5.1`	`0.5.1`
flask-restx flask-restx_project	`< 0.5.1`	`0.5.1`

Description

Flask RESTX contains a regular expression that is vulnerable to ReDoS (Regular Expression Denial of Service) in email_regex.

NVD description

Flask-RESTX (pypi package flask-restx) is a community driven fork of Flask-RESTPlus. Flask-RESTX before version 0.5.1 is vulnerable to ReDoS (Regular Expression Denial of Service) in email_regex. This is fixed in version 0.5.1.

References

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free