CVE-2026-16270 – ReDoS in Open Mercato

CVE ID :CVE-2026-16270

Published : July 22, 2026, 1:16 p.m. | 29 minutes ago

Description :Open Mercato does not validate regex rules. An attacker with privileges to create the regex rule can add an unsafe regex to a field. When someone provide the proper string it can result in a DoS attack.

This issue was fixed in version 0.6.4.

Severity: 6.9 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…