https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-06T16:02:49.533375+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2020-29651 CVE-2020-29651 2026-10-06T16:02:50.946785+00:00

A denial of service via regular expression in the py.path.svnwc component of py (aka python-py) through 1.9.0 could be used by attackers to cause a compute-time denial of service attack by supplying malicious input to the blame functionality.

 https://vulnerability.circl.lu/vuln/usn-5138-1 USN-5138-1 — python-py vulnerability 2026-10-06T16:02:50.946872+00:00

Affected: Ubuntu:18.04:LTS: python-py, Ubuntu:20.04:LTS: python-py

The py.path.svnwc component of py (aka python-py) through v1.9.0 contains a regular expression with an ambiguous subpattern that is susceptible to catastrophic backtracing. This could be used by attackers to cause a compute-time denial of service attack by supplying malicious input to the blame functionality.