The package printf before 0.6.1 are vulnerable to Regular Expression Denial of Service (ReDoS) via the regex string /\%(?:\(([\w_.]+)\)|([1-9]\d*)\$)?([0 +\-\]*)(\*|\d+)?(\.)?(\*|\d+)?[hlL]?([\%bscdeEfFgGioOuxX])/g in li…
CVSS 3.1HIGH 7.5·Network·No auth·No interaction·EPSS 0.02176·Published 2021-03-12·Fixed in 0.6.1CWE-1333