# Rust: Security advisory for the regex crate (CVE-2022-24713)

**URL:** <https://forum.devtalk.com/t/rust-security-advisory-for-the-regex-crate-cve-2022-24713/43941>\
**Category:** Backend Official News\
**Tags:** newsbot, rust, security, official-news\
**Created:** [8 March 2022 14:05 UTC](https://forum.devtalk.com/t/rust-security-advisory-for-the-regex-crate-cve-2022-24713/43941 "2022-03-08T14:05:54Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![NewsBot](https://forum.devtalk.com/user_avatar/forum.devtalk.com/newsbot/32/1114_2.png) [@NewsBot](https://forum.devtalk.com/u/NewsBot)\
**Post date:** [8 March 2022 14:05 UTC](https://forum.devtalk.com/t/rust-security-advisory-for-the-regex-crate-cve-2022-24713/43941/1 "2022-03-08T14:05:54Z")

</div>

A new [Rust](https://devtalk.com/rust) blog post/announcement has been posted!

> [@](#):
>
> > This is a cross-post of [the official security advisory](https://groups.google.com/g/rustlang-security-announcements/c/NcNNL1Jq7Yw). The official advisory contains a signed version with our PGP key, as well.
> 
> The Rust Security Response WG was notified that the `regex` crate did not properly limit the complexity of the regular expressions (regex) it parses. An attacker could use this security issue to perform a denial of service, by sending a specially crafted regex to a service accepting untrusted regexes. No known vulnerability is present when parsing untrusted input with trusted regexes.
> 
> This issue has been assigned CVE-2022-24713. The severity of this vulnerability is "high" when the `regex` crate is used to parse untrusted regexes. Other uses of the `regex` crate are not affected by this vulnerability.
> 
> ## Ov...

Get the full details here: [Redirect](https://blog.rust-lang.org/2022/03/08/cve-2022-24713.html)