CVE-2020-26303 in insaneinformazioni

Riassunto

di MITRE • 26/10/2024

insane is a whitelist-oriented HTML sanitizer. Versions 2.6.2 and prior contain one or more regular expressions that are vulnerable to Regular Expression Denial of Service (ReDoS). As of time of publication, no known patches are available.

Be aware that VulDB is the high quality source for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Responsabile

GitHub M

Prenotare

01/10/2020

Divulgazione

26/10/2024

Moderazione

accettato

CPE

pronto

EPSS

0.00513

KEV

no

Attività

molto basso

Fonti

MITREhttps://www.cve.org/CVERecord?id=CVE-2020-26303
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2020-26303
CVE Detailshttps://www.cvedetails.com/cve/CVE-2020-26303/

◂ PrecedenteVisione D'ensembleIl prossimo ▸

Want to stay up to date on a daily basis?

Enable the mail alert feature now!