-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
The vulnerability is an Inefficient Regular Expression Complexity issue in the Apache Traffic Control's Traffic Router component. The project is retired, and no patch is available. My attempts to locate the vulnerable code by exploring the file system and searching for relevant keywords were unsuccessful due to limitations in traversing the project's directory structure and the absence of a specific commit that addresses the vulnerability. Without a patch or more specific information about the location of the vulnerable code, I cannot confidently identify the vulnerable functions.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| github.com/apache/trafficcontrol/v8 | go | <= 8.0.2 |
Ongoing coverage of React2Shell