CVE-2020-26304: GHSL-2020-290: Regular Expression Denial of Service (ReDoS) in foundation-sites - CVE-2020-26304
Foundation is a front-end framework. Versions 6.3.3 and prior contain one or more regular expressions that are vulnerable to Regular Expression Denial of Service (ReDoS). As of time of publication, it is unknown if any fixes are available.
Other sources
The project contains one or more regular expressions that are vulnerable to ReDoS (Regular Expression Denial of Service)
— GitHub Security Lab
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-26304?
CVE-2020-26304 is classified as a Regular Expression Denial of Service (ReDoS) vulnerability.
How do I fix CVE-2020-26304?
The recommended fix for CVE-2020-26304 is to update to a version of Foundation greater than 6.3.3 if available.
Which versions of Foundation are affected by CVE-2020-26304?
CVE-2020-26304 affects Foundation versions 6.3.3 and prior.
What type of vulnerability is CVE-2020-26304?
CVE-2020-26304 is a Regular Expression Denial of Service vulnerability.
Is there an official patch for CVE-2020-26304?
As of the time of publication, it is unknown if any official fixes are available for CVE-2020-26304.