CyberSecBulletin

Coala vulnerabilities

We track 1 vulnerability in Coala products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on May 15, 2023.

1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score

Latest Coala vulnerabilities

  • 7.5 High severity

    Git-url-parse: Inefficient Regular Expression Complexity

    CVE-2023-32758CoalaEPSS 1.03%

    giturlparse (aka git-url-parse) through 1.2.2, as used in Semgrep 1.5.2 through 1.24.1, is vulnerable to ReDoS (Regular Expression Denial of Service) if parsing untrusted URLs. This might be relevant if Semgrep is analyzing an untrusted package (for example, t