CyberSecBulletin

Urlnorm Project vulnerabilities

We track 1 vulnerability in Urlnorm Project products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on June 21, 2023.

1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score

Latest Urlnorm Project vulnerabilities

  • 7.5 High severity

    Urlnorm: Inefficient Regular Expression Complexity

    CVE-2023-33289Urlnorm ProjectEPSS 1.2%

    The urlnorm crate through 0.1.4 for Rust allows Regular Expression Denial of Service (ReDos) via a crafted URL to lib.rs. NOTE: the Supplier disputes this, taking the position that "Slow printing of URLs is not a CVE."