Oniguruma Project Oniguruma 6.9.2
Approved changes feed: RSS · Atom
cpe:2.3:a:oniguruma_project:oniguruma:6.9.2:-:*:*:*:*:*:*part: a version: 6.9.2 update: -
| Vendor | Oniguruma Project (3e0ccd30-0e69-5758-9a82-c2fd988aa97b) |
|---|---|
| Product | Oniguruma (53065fe1-2374-53cd-9dae-d8ba55703824) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/kkos/oniguruma |
purl2cpe | 2026-06-01 10:16:14.849506 |
pkg:gitlab/redhat/oniguruma |
purl2cpe | 2026-06-01 10:16:14.849508 |
pkg:rpm/centos/oniguruma |
purl2cpe | 2026-06-01 10:16:14.849509 |
pkg:rpm/fedora/oniguruma |
purl2cpe | 2026-06-01 10:16:14.849510 |
pkg:rpm/opensuse/oniguruma |
purl2cpe | 2026-06-01 10:16:14.849512 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2019-13225 |
vulnerable | 2026-06-08 05:12:42.007750 |
Details available
A NULL Pointer Dereference in match_at() in regexec.c in Oniguruma 6.9.2 allows attackers to potentially cause denial of service by providing a crafted regular expression. Oniguruma issues often affect Ruby, as well as common optional libraries for PHP and Rust.
Published: 2019-07-10T13:50:00.000Z
Updated: 2024-08-04T23:49:23.947Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-13224 |
vulnerable | 2026-06-08 05:12:42.005376 |
Details available
A use-after-free in onig_new_deluxe() in regext.c in Oniguruma 6.9.2 allows attackers to potentially cause information disclosure, denial of service, or possibly code execution by providing a crafted regular expression. The attacker provides a pair of a regex pattern and a string, with a multi-byte encoding that gets handled by onig_new_deluxe(). Oniguruma issues often affect Ruby, as well as common optional libraries for PHP and Rust.
Published: 2019-07-10T13:50:57.000Z
Updated: 2024-08-04T23:49:24.159Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.