漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
ReDoS in fastapi-guard's penetration attempts detector
Vulnerability Description
FastAPI Guard is a security library for FastAPI that provides middleware to control IPs, log requests, and detect penetration attempts. fastapi-guard's penetration attempts detection uses regex to scan incoming requests. However, some of the regex patterns used in detection are extremely inefficient and can cause polynomial complexity backtracks when handling specially crafted inputs. This vulnerability is fixed in 3.0.1.
CVSS Information
N/A
Vulnerability Type
CWE-1333
Vulnerability Title
fastapi-guard 安全漏洞
Vulnerability Description
fastapi-guard是Renzo F个人开发者的一个FastAPI的安全库，提供中间件来控制IP、记录请求和检测渗透尝试。 fastapi-guard 3.0.1之前版本存在安全漏洞，该漏洞源于正则表达式模式效率低下，可能导致多项式复杂度回溯。
CVSS Information
N/A
Vulnerability Type
N/A