CVE-2022-24921

regexp.Compile in Go before 1.16.15 and 1.17.x before 1.17.8 allows stack exhaustion via a deeply nested expression

published March 5, 2022

CVSS
—
EPSS
3%
Percentile
88.2
In the wild
Unconfirmed
What it is

regexp.Compile in Go before 1.16.15 and 1.17.x before 1.17.8 allows stack exhaustion via a deeply nested expression.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03228 · 88.2th percentile
Published
2022-03-05T00:00Z
EPSS history
Timeline
  • 05 MAR 00:00Z
    regexp.Compile in Go before 1.16.15 and 1.17.x before 1.17.8 allows stack exhaustion via a deeply nested expression
    cvelistv5