漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
漏洞
N/A
漏洞信息
The _encode_invalid_chars function in util/url.py in the urllib3 library 1.25.2 through 1.25.7 for Python allows a denial of service (CPU consumption) because of an inefficient algorithm. The percent_encodings array contains all matches of percent encodings. It is not deduplicated. For a URL of length N, the size of percent_encodings may be up to O(N). The next step (normalize existing percent-encoded bytes) also takes up to O(N) for each step, so the total time is O(N^2). If percent_encodings were deduplicated, the time to compute _encode_invalid_chars would be O(kN), where k is at most 484 ((10+6*2)^2).
漏洞信息
N/A
漏洞
N/A
漏洞
urllib3 library 资源管理错误漏洞
漏洞信息
urllib3是一款Python HTTP库。该产品具有线程安全连接池、文件发布支持等。 urllib3 library 1.25.2版本至1.25.7版本(Python)中的util/url.py文件的‘_encode_invalid_chars’函数存在安全漏洞。攻击者可利用该漏洞造成拒绝服务。
漏洞信息
N/A
漏洞
N/A