Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
ReDoS in fastapi-guard's penetration attempts detector
Vulnerability Description
FastAPI Guard is a security library for FastAPI that provides middleware to control IPs, log requests, and detect penetration attempts. fastapi-guard's penetration attempts detection uses regex to scan incoming requests. However, some of the regex patterns used in detection are extremely inefficient and can cause polynomial complexity backtracks when handling specially crafted inputs. This vulnerability is fixed in 3.0.1.
CVSS Information
N/A
Vulnerability Type
CWE-1333
Vulnerability Title
fastapi-guard 安全漏洞
Vulnerability Description
fastapi-guard是Renzo F个人开发者的一个FastAPI的安全库，提供中间件来控制IP、记录请求和检测渗透尝试。 fastapi-guard 3.0.1之前版本存在安全漏洞，该漏洞源于正则表达式模式效率低下，可能导致多项式复杂度回溯。
CVSS Information
N/A
Vulnerability Type
N/A