CVE PROGRAM SOURCE RECORDUnscored

CVE-2023-33290

The git-url-parse crate through 0.4.4 for Rust allows Regular Expression Denial of Service (ReDos) via a crafted URL to normalize_url in lib.rs, a similar issue to CVE-2023-32758 (

Status: Published
Published: 2023-06-12
Updated: 2025-01-03
Assigning organization: mitre

Description

The git-url-parse crate through 0.4.4 for Rust allows Regular Expression Denial of Service (ReDos) via a crafted URL to normalize_url in lib.rs, a similar issue to CVE-2023-32758 (Python).

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

n/a n/a

n/aaffected

References

https://lib.rs/crates/git-url-parse ↗
https://github.com/tjtelan/git-url-parse-rs/issues/51 ↗