Skip to content
OpenAdvisories

Package · Debian

pistache

1 known vulnerabilities.

1 result · Feed

  • Medium 5.9

    Pistache: DoS via stack exhaustion in REST router path normalization (regex_replace on long slash runs)

    Pistache is a high-performance REST toolkit written in C++. From 0.0.5 through 0.4.26, `SegmentTreeNode::sanitizeResource()` in `src/server/router.cc` uses `std::regex_replace()` with the `//+` expression to collapse consecutive slashes. With libstdc++, a pat…