Live › vulnerability › CVE-2026-112300
Go to dashboardconfigobj up to 5.0.9 has a regular expression in its _sectionmarker function with inefficient complexity. A crafted config input can make parsing consume excessive CPU, which can stall the application.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Applications that parse configobj files from untrusted sources can be slowed down by crafted input. Applications that only read trusted local config files are unlikely to be exposed. The project had not responded to the report when the advisory was published, so no patched release is confirmed.
No product ranges from the sources yet.
pip show configobj to see the installed versionUnknown from the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A vulnerability was identified in DiffSK configobj up to 5.0.9. Affected by this vulnerability is the function _sectionmarker of the file configobj/init.py. The manipulation leads to inefficient regular expression complexity. Remote exploitation of the attack is possible. The project was informed of the problem early through an issue report but has not responded yet.
This page as .md · .json · in your agent: get_signal("CVE-2026-112300")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.