CVE-2021-45470

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.9% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2021-12-23 · updated 2026-06-17
Weakness: CWE-1333

Description

lib/DatabaseLayer.py in cve-search before 4.1.0 allows regular expression injection, which can lead to ReDoS (regular expression denial of service) or other impacts.

Affected products

CIRCL Cve-Search: before 4.1.0 — fixed in 4.1.0

How to fix

Upgrade to a fixed version: CIRCL Cve-Search 4.1.0. Check the vendor advisory for mitigations.

References

https://github.com/cve-search/cve-search/commit/c621f9f0693a728b93ff3b964f948a1d25917207
https://github.com/cve-search/cve-search/compare/v4.0...v4.1.0
https://github.com/cve-search/cve-search/pull/629
https://github.com/cve-search/cve-search/commit/c621f9f0693a728b93ff3b964f948a1d25917207
https://github.com/cve-search/cve-search/compare/v4.0...v4.1.0
https://github.com/cve-search/cve-search/pull/629

Get alerted when CVE-2021-45470 or the next vulnerability affects your stack