Impact
Delgan loguru 0.7.3 contains a regular expression that is susceptible to exponential back‑tracking when processing the AnsiParser.feed function in the ANSI Color‑Markup Parser. The complexity of the parsing routine can be manipulated to consume excessive CPU resources, resulting in a denial‑of‑service condition for the process that performs the parsing. The description explicitly states that the exploit is now public and can be carried out remotely, indicating that an attacker need not have local access to trigger the failure.
Affected Systems
The affected vendor is Delgan, product Loguru. The version explicitly listed as affected is 0.7.3. No other versions are mentioned in the provided data.
Risk and Exploitability
The CVSS score of 5.3 places this vulnerability in the medium severity range, while the EPSS score is not available, and it is not listed in the CISA KEV catalog. Because the attack can be performed remotely and the exploit is publicly available, the risk that an active adversary will leverage this weakness remains significant. An attacker would supply a specially crafted input string to AnsiParser.feed, causing the regular expression engine to enter a state of exponential back‑tracking, exhausting CPU resources and potentially crashing the application or processing thread.
OpenCVE Enrichment