Skip to content
OpenAdvisories

Archive

4 February 2020

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • Medium 5.7
    CVE-2020-5236 Public exploit

    Catastrophic backtracking in regex allows Denial of Service in Waitress

    Waitress version 1.4.2 allows a DOS attack When waitress receives a header that contains invalid characters. When a header like "Bad-header: xxxxxxxxxxxxxxx\x10" is received, it will cause the regular expression engine to catastrophically backtrack causing th…