PyPI: dparse2

CVE-2022-39280

Safety vulnerability ID: SFTY-20221006-42172

Safety legacy ID: pyup.io-44512

Dparse2 0.6.0 fixes a security issue related to Regex parsing. https://github.com/pyupio/dparse/commit/3aecaac9a1bde349418810a320a7e5ec31ee276a

PyPI

NVD

GHSA

Created at: Jul 5, 2026Updated at: Jul 5, 2026

Overview

ReDoS issue in dparse

Advisory

Dparse2 0.6.0 fixes a security issue related to Regex parsing. https://github.com/pyupio/dparse/commit/3aecaac9a1bde349418810a320a7e5ec31ee276a

Affected Package

Affecting dparse2 package, versions<0.6.0

Also affects

---

How to Fix

Upgradedparse2to0.6.0or higher.

Mitigation and Workarounds

---

Vulnerable Functions

Functions linked to known vulnerabilities.

Vulnerable function data is available for Enterprise customers

Book a call with us to see Safety in action.

References

https://getsafety.com/vulnerabilities/SFTY-20221006-42172/CVE-2022-39280
https://github.com/pyupio/dparse/security/advisories/GHSA-8fg9-p83m-x5pq
https://github.com/pyupio/dparse/commit/8c990170bbd6c0cf212f1151e9025486556062d5
https://github.com/pyupio/dparse/commit/d87364f9db9ab916451b1b036cfeb039e726e614
https://owasp.org/www-community/attacks/Regular_expression_Denial_of_Service_-_ReDoS
https://nvd.nist.gov/vuln/detail/CVE-2022-39280
https://github.com/pypa/advisory-database/tree/main/vulns/dparse/PYSEC-2022-301.yaml
https://github.com/advisories/GHSA-8fg9-p83m-x5pq

Verified by Safety

Our Cybersecurity Intelligence Team reviewed this vulnerability. We combine public data with our own research to find issues not yet reported to public sources.

Learn more