Skip to content

Product

string project string vulnerabilities

1 published CVE affecting string project string, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
1
Medium
0
Low
0
Unscored
0
CISA KEV
0

Latest string project string CVEs

Newest publication first

  1. CVE-2017-16116 Regular Expression Denial of Service in string package

    Published
    HighCVSS 7.5 EPSS 1.6%

    The string module is a module that provides extra string operations. The string module is vulnerable to regular expression denial of service when specifically crafted untrusted user input is passed into the underscore or unescapeHTML methods.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.