CVE-2017-18361

PoC —

CVSS 3.0

7.5 high

EPSS

2%p77

Published

Feb 1, 2019 (Feb 1, 2019)

Modified

Jun 17, 2026

Description

In Pylons Colander through 1.6, the URL validator allows an attacker to potentially cause an infinite loop thereby causing a denial of service via an unclosed parenthesis.

Vendors: pylonsproject
Products: colander
Weakness: CWE-835
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (1.8%)

In the news0 stories

No ingested article mentions this CVE yet.