vulnerability

FreeBSD: VID-c7855866-c511-11eb-ae1d-b42e991fc52e (CVE-2020-8492): tauthon -- Regular Expression Denial of Service

Severity
7
CVSS
(AV:N/AC:M/Au:N/C:N/I:N/A:C)
Published
Jun 4, 2021
Added
Jun 4, 2021
Modified
Dec 10, 2025

Description

The :class:`~urllib.request.AbstractBasicAuthHandler` class of the :mod:`urllib.request` module uses an inefficient regular expression which can be exploited by an attacker to cause a denial of service

Solutions

freebsd-upgrade-package-tauthonfreebsd-upgrade-package-python35freebsd-upgrade-package-python37freebsd-upgrade-package-python38freebsd-upgrade-package-python36freebsd-upgrade-package-python27
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.