danswer-ai/danswer Regular Expression Denial-of-Service Vulnerability

A Regular Expression Denial-of-Service (ReDoS) vulnerability has been identified in danswer-ai/danswer version 1. This vulnerability allows an attacker to manipulate regular expressions, significantly degrading the application's response time and potentially causing it to become completely unusable.

Impact

Exploitation of this vulnerability leads to a Regular Expression Denial-of-Service, causing significant slowdowns in application response times and potentially rendering the application unusable.