bpo-43075: Fix ReDoS in urllib AbstractBasicAuthHandler (GH-24391)
Fix Regular Expression Denial of Service (ReDoS) vulnerability in urllib.request.AbstractBasicAuthHandler. The ReDoS-vulnerable regex has quadratic worst-case complexity and it allows cause a denial of service when identifying crafted invalid RFCs. This ReDoS issue is on the client side and needs remote attackers to control the HTTP server.
Y
Yeting Li committed
7215d1ae25525c92b026166f9d5cac85fb1defe1
Parent: d36d6a9
Committed by GitHub <noreply@github.com>
on 4/7/2021, 11:27:41 AM