pypi configobj vulnerabilities

Latest pypi configobj CVEs

Newest publication first

1. CVE-2023-26112 configobj ReDoS exploitable by developer using values in a server-side configuration file

   Published 2023-04-03

   Medium·CVSS 5.9 EPSS 1.3%

   All versions of the package configobj are vulnerable to Regular Expression Denial of Service (ReDoS) via the validate function, using (.+?)((.*)). Note: This is only exploitable in the case of a developer, putting the offending value in a server side configuration file.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.