CVE-2026-16270 — ReDoS in Open Mercato
Open Mercato does not validate regex rules. An attacker with privileges to create the regex rule can add an unsafe regex to a field. When someone provide the proper string it ca…
Published: 2026-07-22 · CVSS: 6.9 · CVSS 4.0
Open Mercato does not validate regex rules. An attacker with privileges to create the regex rule can add an unsafe regex to a field. When someone provide the proper string it can result in a DoS attack. This issue was fixed in version 0.6.4.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7