Delgan loguru ANSI Color-Markup _colorizer.py AnsiParser.feed redos
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Delgan | loguru | affected |
|
No data.
No data.
| Vendor | Product | Versions | ||||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Delgan | Loguru |
|
This CVE is not in the KEV list.
Exploit prediction score: < 1% (0.271% probability within 30 days)
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
| Type | Values Removed | Values Added |
|---|---|---|
| References |
| |
| Metrics |
threat_severity
|
threat_severity
|
| Type | Values Removed | Values Added |
|---|---|---|
| Description | A vulnerability was detected in Delgan loguru 0.7.3. The affected element is the function AnsiParser.feed of the file loguru/_colorizer.py of the component ANSI Color-Markup Parser. Performing a manipulation results in inefficient regular expression complexity. The attack is possible to be carried out remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. | |
| Title | Delgan loguru ANSI Color-Markup _colorizer.py AnsiParser.feed redos | |
| First Time appeared |
Delgan
Delgan loguru |
|
| Weaknesses | CWE-1333 CWE-400 |
|
| CPEs | cpe:2.3:a:delgan:loguru:*:*:*:*:*:*:*:* | |
| Vendors & Products |
Delgan
Delgan loguru |
|
| References |
| |
| Metrics |
cvssV2_0
|