Asymmetric denial of service - ReDoS In wheel
Description
pypa/wheel vulnerable to Regular Expression denial of service (ReDoS) Python Packaging Authority (PyPA) Wheel is a reference implementation of the Python wheel packaging standard. Wheel 0.37.1 and earlier are vulnerable to a Regular Expression denial of service via attacker controlled input to the wheel cli. The vulnerable regex is used to verify the validity of Wheel file names. This has been patched in version 0.38.1.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Component | Affected version | Patched versions |
|---|---|---|---|
 debian 13 | 0.38.0-1 | ||
 pypi | 0.38.1 | ||
debian 12 | 0.38.0-1 | ||
debian 14 | 0.38.0-1 | ||
 rpm rhel7 | - | - | |
rpm rhel9 | 0:0.1.10-1.el9_5 | ||
rpm rhel9 | 1:0.36.2-8.el9 | ||
rpm rhel8 | - | - |
Aliases
1. 2. 3. 4. 5. 6.
References
1. 2. 3. 4. 5.