Skip to content

PatchFirst · Latest vulnerabilities

configobj vulnerabilities

Vulnerabilities published for configobj in the last 30 days: 1. Listed in the KEV catalogue: 0.

Vulnerabilities: 2

CVE-2026-112300
Medium · CVSS 6.9EPSS 0.4%No fix published
DiffSK configobj __init__.py _sectionmarker redos
A vulnerability was identified in DiffSK configobj up to 5.0.9. Affected by this vulnerability is the function _sectionmarker of the file configobj/__init__.py. The manipulation leads to inefficient regular expression complexity. Remote exploitation of the attack is possible. The project was informed of the problem early through an issue report but has not responded yet.
configobj Operating systems
Published October 19, 2026Updated October 20, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2023-26112
Low · CVSS 3.7EPSS 1.27%No fix published
CVE-2023-26112
All versions of the package configobj are vulnerable to Regular Expression Denial of Service (ReDoS) via the validate function, using (.+?)\((.*)\). **Note:** This is only exploitable in the case of a developer, putting the offending value in a server side configuration file.
configobj Operating systems
Published April 3, 2023Updated February 13, 2025
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →