GHSA-j2r2-7qpg-p675: Semantic MediaWiki 3.0.0 before 7.3.1 Denial of Service via Special:Search Compact Filters
Published Oct 27, 2026
·Updated
Semantic MediaWiki from 3.0.0 before 7.3.1 contains an algorithmic complexity vulnerability in TermParser::normalizecompactform() that allows unauthenticated attackers to cause quadratic CPU consumption. Attackers can submit long search terms with many distinct in:(...) or has:(...) expressions to Special:Search to exhaust PHP search workers when the extended search engine is enabled.
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Semantic MediaWikito a version that resolves this vulnerability.Fixed in 7.3.1
Event History
Oct 27, 2026
CVE Published
via OSV·10:23 AM
Data Sourced
via OSV·10:23 AM
DescriptionSeverityWeakness