EUVD-2023-0685Published

formula is a math and string formula parser. In versions prior to 3.0.1 crafted user-provided strings to formula's parser might lead to polynomial execution time and a denial of service. Users should upgrade to 3.0.1+. There are no known wo…

Exact source revision recorded 3 Nov 2026 23:06:19 UTC. It does not establish the source's current position. Latest evidence.

Recorded JSON

euvd · EUVD-2023-0685

Published

formula is a math and string formula parser. In versions prior to 3.0.1 crafted user-provided strings to formula's parser might lead to polynomial execution time and a denial of service. Users should upgrade to 3.0.1+. There are no known workarounds for this vulnerability.

EUVD source date text has no stated timezone and is retained without inventing a UTC instant. Related bulletin membership is not an alias, common cause or applicability claim. A missing vector with a zero score is treated as unrated. Complete vendor/product and underlying source evidence remains in the original JSON.

Original publisher date fields

datePublished: Feb 8, 2023, 7:28:29 PM

dateUpdated: Mar 10, 2025, 9:14:39 PM

Source published: Feb 8, 2023, 7:28:29 PM (timezone not stated)
Source modified: Mar 10, 2025, 9:14:39 PM (timezone not stated)
Observed here: 3 Nov 2026 23:06:19 UTC
Source terms: ENISA EUVD · source terms and attribution apply

Original source record · Cite this exact observation · Complete original publisher JSON

This view projects the publisher's source fields for reading; the original JSON retains additional fields and CVE enrichment containers. Attribution: euvd · ENISA EUVD · source terms and attribution apply. Source text is retained; field grouping and change labels are provided by ChangeIntel.

EUVD CVSS 3.1 · 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H