ReDoS issue in dparse
### Impact
dparse versions prior to 0.5.1 contain a regular expression that is vulnerable to ReDoS
https://owasp.org/www-community/attacks/Regular_expression_Denial_of_Service_-_ReDoS (Regular Expression Denial of Service).
All users parsing index server URLs with dparse are impacted by this vulnerability.
### Patches
The Patch is applied in the `0.5.2` version, all users are recommended to upgrade as soon as possible.
### Workarounds
Avoid passing index server URLs in the source file to be parsed.
### References
https://github.com/pyupio/dparse/tree/security/remove-intensive-regex https://github.com/pyupio/dparse/tree/security/remove-intensive-regex
### For more information
If you have any questions or comments about this advisory:
* Email us at [support@pyup.io](mailto:support@pyup.io)