Georg Brandl

2 exploits Active since Mar 2021
CVE-2021-27291 WRITEUP HIGH WRITEUP
Pygments 1.1-2.7.3 - Denial of Service via Inefficient Regular Expression Complexity
In pygments 1.1+, fixed in 2.7.4, the lexers used to parse programming languages rely heavily on regular expressions. Some of the regular expressions have exponential or cubic worst-case complexity and are vulnerable to ReDoS. By crafting malicious input, an attacker can cause a denial of service.
CVSS 7.5
CVE-2021-27292 WRITEUP HIGH WRITEUP
ua-parser-js 0.7.14-0.7.23 - Denial of Service via Malicious User-Agent Header
ua-parser-js >= 0.7.14, fixed in 0.7.24, uses a regular expression which is vulnerable to denial of service. If an attacker sends a malicious User-Agent header, ua-parser-js will get stuck processing it for an extended period of time.
CVSS 7.5