From 75f4f63ab3856a552f06082aabf98845b5fa21e3 Mon Sep 17 00:00:00 2001 From: theworstcomrade <4lbercik@gmail.com> Date: Fri, 18 Feb 2022 16:28:03 +0100 Subject: [PATCH] Low risk ReDoS vuln https://huntr.dev/bounties/8549d81f-dc45-4af7-9f2a-2d70752d8524/ --- git/remote.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/git/remote.py b/git/remote.py index 7d5918a5a..56f3c5b33 100644 --- a/git/remote.py +++ b/git/remote.py @@ -273,7 +273,7 @@ class FetchInfo(IterableObj, object): NEW_TAG, NEW_HEAD, HEAD_UPTODATE, TAG_UPDATE, REJECTED, FORCED_UPDATE, \ FAST_FORWARD, ERROR = [1 << x for x in range(8)] - _re_fetch_result = re.compile(r'^\s*(.) (\[?[\w\s\.$@]+\]?)\s+(.+) -> ([^\s]+)( \(.*\)?$)?') + _re_fetch_result = re.compile(r'^\s*(.) (\[[\w\s\.$@]+\]|[\w\.$@]+)\s+(.+) -> ([^\s]+)( \(.*\)?$)?') _flag_map: Dict[flagKeyLiteral, int] = { '!': ERROR,