k-takata/Onigmo

k-takata/Onigmo

Releases85
Frequency1 month 2 days
Last Release
Stars678
Onigmo is a regular expressions library forked from Oniguruma.

CVE History

CVEPublishedCVSS v3CVSS v2
7.5 HIGH5 MEDIUM

Onigmo through 6.2.0 has a NULL pointer dereference in onig_error_code_to_str because of fetch_token in regparse.c.

7.5 HIGH5 MEDIUM

Onigmo through 6.2.0 has an out-of-bounds read in parse_char_class because of missing codepoint validation in regenc.c.