CVE-2022-31099

rulex is a new, portable, regular expression language. When parsing untrusted rulex expressions, the stack may overflow, possibly enabling a Denial of Service attack. This happens when parsing an expression with several hundred levels of nesting, causing the process to abort immediately. This is a security concern for you, if your service parses untrusted rulex expressions (expressions provided by an untrusted user), and your service becomes unavailable when the process running rulex aborts due to a stack overflow. The crash is fixed in version **0.4.3**. Affected users are advised to update to this version. There are no known workarounds for this issue.

• CWE-674

• https://github.com/rulex-rs/rulex/commit/60aa2dc03a22d69c8800fec81f99c96958a11363Patch, Third Party Advisory
• https://github.com/rulex-rs/rulex/security/advisories/GHSA-v78m-2q7v-fjqpThird Party Advisory
• https://github.com/rulex-rs/rulex/commit/60aa2dc03a22d69c8800fec81f99c96958a11363Patch, Third Party Advisory
• https://github.com/rulex-rs/rulex/security/advisories/GHSA-v78m-2q7v-fjqpThird Party Advisory

Published

Jun 27, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-31093NextAuth.js is a complete open source authentication solutio…7.5
• CVE-2022-31094ScratchTools is a web extension designed to make interacting…6.1
• CVE-2022-31095discourse-chat is a chat plugin for the Discourse applicatio…6.5
• CVE-2022-31096Discourse is an open source discussion platform. Under certa…5.7
• CVE-2022-31097Grafana is an open-source platform for monitoring and observ…8.7
• CVE-2022-31098Weave GitOps is a simple open source developer platform for …7.5
• CVE-2022-3110An issue was discovered in the Linux kernel through 5.16-rc6…5.5
• CVE-2022-31100rulex is a new, portable, regular expression language. When …6.5
• CVE-2022-31101prestashop/blockwishlist is a prestashop extension which add…8.8
• CVE-2022-31102Argo CD is a declarative, GitOps continuous delivery tool fo…6.1
• CVE-2022-31103lettersanitizer is a DOM-based HTML email sanitizer for in-b…7.5
• CVE-2022-31104Wasmtime is a standalone runtime for WebAssembly. In affecte…5.6