GitHub Advisoryadvisory · PyPI

GHSA-f865-m6cq-j9vx ReDOS in Mpmath

HIGH Published 2021-08-09 Modified 2024-10-03 Official page ↗
Aliases
CVE-2021-29063
Ecosystem
PyPI
Packages
mpmath
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-770
Reviewed
2021-06-22

Affected packages

• PyPI mpmath: < 1.3.0 → fixed in 1.3.0

Description

A Regular Expression Denial of Service (ReDOS) vulnerability was discovered in Mpmath v1.0.0 when the mpmathify function is called.

Related

Alias · CVE (1)

  • CVE-2021-29063 A Regular Expression Denial of Service (ReDOS) vulnerability was discovered in Mpmath v1.0.0 through v1.2.1 when the mpmathify function is… vulnerability

Weakness · CWE (1)

  • CWE-770 Allocation of Resources Without Limits or Throttling weakness

References