CVE-2026-112300

MEDIUM 5.3

DiffSK configobj init.py _sectionmarker redos

CVSS Score

5.3

EPSS Score

0.0%

EPSS Percentile

0th

A vulnerability was identified in DiffSK configobj up to 5.0.9. Affected by this vulnerability is the function _sectionmarker of the file configobj/__init__.py. The manipulation leads to inefficient regular expression complexity. Remote exploitation of the attack is possible. The project was informed of the problem early through an issue report but has not responded yet.

CWE	CWE-1333 CWE-400
Vendor	diffsk
Product	configobj
Published	Oct 19, 2026

Stay Ahead of the Next One

Get instant alerts for diffsk configobj

Be the first to know when new medium vulnerabilities affecting diffsk configobj are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:X/RL:X/RC:C

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Scope

Confidentiality

Integrity

Availability

Affected Versions

DiffSK / configobj

5.0.0 5.0.1 5.0.2 5.0.3 5.0.4 5.0.5 5.0.6 5.0.7 5.0.8 5.0.9

References

NVD ↗ CVE.org ↗ EPSS Data ↗

vuldb.com: https://vuldb.com/vuln/422346 vuldb.com: https://vuldb.com/vuln/422346/cti vuldb.com: https://vuldb.com/cve/CVE-2026-112300 vuldb.com: https://vuldb.com/submit/989395 github.com: https://github.com/DiffSK/configobj/issues/281 github.com: https://github.com/DiffSK/configobj/

Credits

🔍 Mohammedix88 (VulDB User) VulDB CNA Team