Description
A vulnerability in danswer-ai/danswer version 1 allows an attacker to perform a Regular Expression Denial of Service (ReDoS) by manipulating regular expressions. This can significantly slow down the application's response time and potentially render it completely unusable.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| danswer-ai | danswer-ai/danswer | unspecified – ≤ latest | — |