https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 14:37:48 +0000 https://vulnerability.circl.lu/vuln/cve-2026-4926 <p><strong>Affected:</strong> path-to-regexp, Red Hat Cryostat 4 on RHEL 9, Red Hat Ansible Automation Platform 2.5 for RHEL 8, Red Hat Ansible Automation Platform 2.5 for RHEL 9, Red Hat Ansible Automation Platform 2.6 for RHEL 9, Red Hat Migration Toolkit for Virtualization 2.1, Red Hat Migration Toolkit for Virtualization 2.9, Red Hat Ansible Automation Platform 2.6, Red Hat Developer Hub 1.8, Red Hat Developer Hub 1.9 and 42 more</p> <p>Impact:</p> <p>A bad regular expression is generated any time you have multiple sequential optional groups (curly brace syntax), such as `{a}{b}{c}:z`. The generated regex grows exponentially with the number of groups, causing denial of service.</p> <p>Patches:</p> <p>Fixed in version 8.4.0.</p> <p>Workarounds:</p> <p>Limit the number of sequential optional groups in route patterns. Avoid passing user-controlled input as route patterns.</p> <p><strong>Affected:</strong> path-to-regexp, Red Hat Cryostat 4 on RHEL 9, Red Hat Ansible Automation Platform 2.5 for RHEL 8, Red Hat Ansible Automation Platform 2.5 for RHEL 9, Red Hat Ansible Automation Platform 2.6 for RHEL 9, Red Hat Migration Toolkit for Virtualization 2.1, Red Hat Migration Toolkit for Virtualization 2.9, Red Hat Ansible Automation Platform 2.6, Red Hat Developer Hub 1.8, Red Hat Developer Hub 1.9 and 42 more</p> <p>Impact:</p> <p>A bad regular expression is generated any time you have multiple sequential optional groups (curly brace syntax), such as `{a}{b}{c}:z`. The generated regex grows exponentially with the number of groups, causing denial of service.</p> <p>Patches:</p> <p>Fixed in version 8.4.0.</p> <p>Workarounds:</p> <p>Limit the number of sequential optional groups in route patterns. Avoid passing user-controlled input as route patterns.</p> https://vulnerability.circl.lu/vuln/cve-2026-4926