Staging Environment: Content and features may be unstable or change without notice.

Advisory Severity Curation

GHSA-c33w-24p9-8m24

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-c33w-24p9-8m24

configobj ReDoS exploitable by developer using values in a server-side configuration file All versions of the package configobj are vulnerable to Regular Expression Denial of Service (ReDoS) via the validate function, using (.+?)\((.*)\). **Note:** This is only exploitable in the case of a developer, putting the offending value in a server side configuration file.

gitlab/pypi/configobj/CVE-2023-26112

configobj ReDoS exploitable by developer using values in a server-side configuration file All versions of the package configobj are vulnerable to Regular Expression Denial of Service (ReDoS) via the validate function, using (.+?)\((.*)\). **Note:** This is only exploitable in the case of a developer, putting the offending value in a server side configuration file.

pypa/configobj/PYSEC-2026-1270

configobj ReDoS exploitable by developer using values in a server-side configuration file All versions of the package configobj are vulnerable to Regular Expression Denial of Service (ReDoS) via the validate function, using (.+?)\((.*)\). **Note:** This is only exploitable in the case of a developer, putting the offending value in a server side configuration file.

pysec/PYSEC-2026-1270

configobj ReDoS exploitable by developer using values in a server-side configuration file All versions of the package configobj are vulnerable to Regular Expression Denial of Service (ReDoS) via the validate function, using (.+?)\((.*)\). **Note:** This is only exploitable in the case of a developer, putting the offending value in a server side configuration file.