Lucasrodes

CVE-2026-121577: Inefficient Regular Expression Complexity (CWE-1333) in generate_regex() (whatstk/whatsapp/parser.py) in whatstk from 0.2.0 before 0.9.0 allows a party that sup

CVE-2026-121577 Nov 3, 2026 Source: Vendor

Inefficient Regular Expression Complexity (CWE-1333) in generate_regex() (whatstk/whatsapp/parser.py) in whatstk from 0.2.0 before 0.9.0 allows a party that supplies a chat export to consume the CPU of the process that parses it for an unbounded time, because the function builds the header regular expression by replacing each %x code with its named capture group and leaves every other character of the header format in the pattern unescaped. A header whose date separator is a regular expression m

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://nvd.nist.gov/vuln/detail/CVE-2026-121577

Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

3 lines

Showing 1–3 of 3

CVE-2026-121577 BR2026-0000-041748 unclaimed

Credited as m.gongora.carriedo

CVE-2026-121577 BR2026-0000-041749 unclaimed

Credited as Xoán M. Otero Jorge

CVE-2026-121577 BR2026-0000-041750 unclaimed

Credited as Darío Rivas