TI-2021-06050 CVE-2021-23354 · GHSA-xfhp-gmh8-r8v2
Regular expression denial of service (ReDoS) in printf
Priority LOW 37
The package printf before 0.6.1 are vulnerable to Regular Expression Denial of Service (ReDoS) via the regex string /\%(?:\(([\w_.]+)\)|([1-9]\d*)\$)?([0 +\-\]*)(\*|\d+)?(\.)?(\*|\d+)?[hlL]?([\%bscdeEfFgGioOuxX])/g in li…