PYSEC-2022-42969
Withdrawn ·
At a glance
- Published
- Updated
- CVE
- CVE-2022-42969
- Aliases
- GHSA-w596-4wvx-j9j6, PYSEC-2022-43183
Description
The py library through 1.11.0 for Python allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data, because the InfoSvnCommand argument is mishandled.
Affected packages
| Package | Versions |
|---|---|
| PyPI · py | introduced 0, last affected 1.11.0 |
References
- https://github.com/advisories/GHSA-w596-4wvx-j9j6 ADVISORY
- https://nvd.nist.gov/vuln/detail/CVE-2022-42969 WEB
- https://github.com/pytest-dev/py/issues/287 REPORT
- https://github.com/pytest-dev/py/issues/288 REPORT
- https://github.com/pytest-dev/pytest/issues/10392 REPORT
Sources
| Source | Licence |
|---|---|
| OSV.dev | CC-BY 4.0 — PyPA Advisory Database |