Configobj Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Configobj Project records in CISA KEV

No Configobj Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record

TI-2023-11337 CVE-2023-26112 · GHSA-c33w-24p9-8m24

MEDIUM 60

All versions of the package configobj are vulnerable to Regular Expression Denial of Service (ReDoS) via the validate function, using (.+?)\((.*)\).

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.01269 Published 2023-04-03 Partial fix · 5.0.9 CWE-1333