CVE-2024-1892 Information

Description

Parts of the Scrapy API were found to be vulnerable to a ReDoS attack. Handling a malicious response could cause extreme CPU and memory usage during the parsing of its content due to the use of vulnerable regular expressions for that parsing.

Reference

https://huntr.com/bounties/271f94f2-1e05-4616-ac43-41752389e26b https://github.com/scrapy/scrapy/commit/479619b340f197a8f24c5db45bc068fb8755f2c5