CVE-2026-18503

ADVISORY - nist

Summary

Attacker-controlled CSV samples can trigger super-linear regular-expression work during dialect sniffing and consume significant CPU when applications pass unbounded input to csv.Sniffer.sniff().

EPSS Score⁠: 0.00119 (0.021)

Common Weakness Enumeration (CWE)

ADVISORY - nist

CWE-1176⁠

Inefficient CPU Computation

Impacted images

Advisories

Docker

CREATED

3 days ago

UPDATED

2 days ago

ADVISORY ID

CVE-2026-18503

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

NIST

CREATED

3 days ago

UPDATED

22 hours ago

ADVISORY IDCVE-2026-18503⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)

CWE-1176⁠

CVSS SCORE

2.4low

Ubuntu

CREATED

1 day ago

UPDATED

1 day ago

ADVISORY IDCVE-2026-18503⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Amedium