Onigmo through 6.2.0 has a NULL pointer dereference in onig_error_code_to_str because of fetch_token in regparse.c.
CVSS Score
7.5
EPSS Score
0.003
Published
2019-09-09
Onigmo through 6.2.0 has an out-of-bounds read in parse_char_class because of missing codepoint validation in regenc.c.
CVSS Score
7.5
EPSS Score
0.003
Published
2019-09-09