CyberSecBulletin

Async Project vulnerabilities

We track 1 vulnerability in Async Project products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on July 1, 2024.

1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score

Latest Async Project vulnerabilities

  • 7.5 High severity

    async: Inefficient Regular Expression Complexity

    CVE-2024-39249Async Project

    Async <= 2.6.4 and <= 3.2.5 are vulnerable to ReDoS (Regular Expression Denial of Service) while parsing function in autoinject function. NOTE: this is disputed by the supplier because there is no realistic threat model: regular expressions are not used with u