{"id":"CVE-2021-29061","details":"A Regular Expression Denial of Service (ReDOS) vulnerability was discovered in Vfsjfilechooser2 version 0.2.9 and below which occurs when the application attempts to validate crafted URIs.","aliases":["GHSA-c7fh-chf7-jr5x"],"modified":"2026-07-08T12:53:56.383454Z","published":"2021-06-21T20:15:09.437Z","references":[{"type":"ADVISORY","url":"https://github.com/fracpete/vfsjfilechooser2/releases/tag/vfsjfilechooser2-0.2.9"},{"type":"REPORT","url":"https://github.com/fracpete/vfsjfilechooser2/issues/7"},{"type":"FIX","url":"https://github.com/fracpete/vfsjfilechooser2/commit/9c9f2c317f3de5ece60a3ae28c371e9796e3909b"},{"type":"FIX","url":"https://github.com/yetingli/PoCs/blob/main/CVE-2021-29061/Vfsjfilechooser2.md"},{"type":"FIX","url":"https://github.com/yetingli/SaveResults/blob/main/md/vfsjfilechooser2.md"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/fracpete/vfsjfilechooser2","events":[{"introduced":"0"},{"last_affected":"4483903e098e2d23754d82ec18d3b9ca96f4b3e5"},{"fixed":"9c9f2c317f3de5ece60a3ae28c371e9796e3909b"}],"database_specific":{"cpe":"cpe:2.3:a:vfsjfilechooser2_project:vfsjfilechooser2:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"0"},{"last_affected":"0.2.9"}],"source":["CPE_RANGE","REFERENCES"]}}],"versions":["vfsjfilechooser2-0.2.9","vfsjfilechooser2-0.2.8","vfsjfilechooser2-0.2.7","vfsjfilechooser2-0.2.5","vfsjfilechooser2-0.2.4","vfsjfilechooser2-0.2.3","vfsjfilechooser2-0.2.2","vfsjfilechooser2-0.2.1","vfsjfilechooser2-0.2.0","vfsjfilechooser2-0.1.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-29061.json","vanir_signatures_modified":"2026-07-08T12:53:56Z","vanir_signatures":[{"signature_type":"Function","signature_version":"v1","source":"https://github.com/fracpete/vfsjfilechooser2/commit/9c9f2c317f3de5ece60a3ae28c371e9796e3909b","target":{"file":"src/main/java/com/googlecode/vfsjfilechooser2/utils/VFSURIValidator.java","function":"isValid"},"deprecated":false,"digest":{"length":3358,"function_hash":"32610702540089773096803072955217740217"},"id":"CVE-2021-29061-3b8ad845"},{"target":{"file":"src/main/java/com/googlecode/vfsjfilechooser2/utils/VFSURIValidator.java"},"deprecated":false,"digest":{"line_hashes":["244869542580126931410681563727222122501","153571336168327205981627707564121641482","321476537301516220365365052765268209565","9110560511868757737930664674846768168","80754120414743615097299986216006988295","85921862642269231728429198427283117335","239495029357052874898300204685748182042","67707632876582443624306608098368583658","266238226859244165319335777148044559823","193767746202501483257598017446118144068","69334193136768908761299039532894419026","226246446131219890157384714451557110618","100924157039026309945088741539911711811","151087138727002875738094825916986722034","212206407369302958730761209122919703859","66193971405929343361748456891461537153","240143929029892345540630824217179052315","21773062490420483382207311110556685016","201719443497220780754376732196009665539","208955931028228596552149120307703012138","18689055968701733283112635087765930007","324449211976931607839189247192047777292","239094001709492079736620426565775432871","228219810643798895728765850503102769029","292773457540732900398109511283001163088","313318361591312900775466108224551999513","240143929029892345540630824217179052315","21773062490420483382207311110556685016","201719443497220780754376732196009665539","208955931028228596552149120307703012138","18689055968701733283112635087765930007","178440868249314760635774138381707118727","100924157039026309945088741539911711811","151087138727002875738094825916986722034","212206407369302958730761209122919703859","66193971405929343361748456891461537153","239094001709492079736620426565775432871","228219810643798895728765850503102769029","292773457540732900398109511283001163088","313318361591312900775466108224551999513","105438366176732774690607128970751603680","204311253227050465295549784580782149265","151102769691113396688443192665528369242","65473059133970915211186530249050885131","8416060986663407041260722425726543517","148529897897058997941068817399808948003","239359371134789793556228565825795372780","297272343394013197146079477136862044985","177806496158002302918278179838170525334","170089227680092537822635033931617861577","200613041932571568421122794594499550607","138550086947612660558821583912305881461","262347177176801028281808130324554874605","271561376556187626665237294531002840564","138764524432021133234414984818170524044","215651754719008738248765393900278866476","270932790881158373120712597011665905605","158307492085787207441363527624326039022","240593299282072514726665700247009402277","213673498316338182696496825081235261013","224034662034276397878038657551270483402","73031603220105226148456356748742489288","285326095043501768083371138829893935549","235759759083203128974209913752951539286","217543897505461020863280506363521070859","145254722851106277097228557307845028546","337275519432762692780430558554534759320","115770636647153481550990805463515168877","105438366176732774690607128970751603680","204311253227050465295549784580782149265","151102769691113396688443192665528369242","65473059133970915211186530249050885131","8416060986663407041260722425726543517","148529897897058997941068817399808948003","239359371134789793556228565825795372780","297272343394013197146079477136862044985","227176321889590015735272547603583090676","79070378376200483477446716719157134066","284636449933794612363119831244241591301","128484830465295481809702176767001740515","157198192245188984413387715331684012969","264303218075270657213196770955375791275","318755008749466089209442409570690286687","320596497052133028037937371323743497313","77523513236325732704195209299357202575","149950311757209462626945358966027876814","51319620374040374353458927009652564013","51408790787901322081058348271545466095","175183044569201012628268119605583944891","201921306828281402080371842578709947142","7888567567143188753723257835301301464","282114608858529842347084086023474119079","300610202092338315152990808227536633794","190418686979132769550184236015695571843","100899473828102256462303864156214306867","58202528242484697790685321422825726760","289736610909381211800347176594977834002","120245934794639494673184742810688482871","272481169837524460421144354831020892504","225538509803315073805760619163962178153","26684215014941138069723411944722492123","207250292468187170942755561055130851586","278039867544475858408702055258143543432","255103837418687147291462742860319783367","227176321889590015735272547603583090676","79070378376200483477446716719157134066","284636449933794612363119831244241591301","128484830465295481809702176767001740515","157198192245188984413387715331684012969","264303218075270657213196770955375791275","318755008749466089209442409570690286687","320596497052133028037937371323743497313","77523513236325732704195209299357202575","149950311757209462626945358966027876814","51319620374040374353458927009652564013","51408790787901322081058348271545466095","175183044569201012628268119605583944891","201921306828281402080371842578709947142","7888567567143188753723257835301301464","282114608858529842347084086023474119079","300610202092338315152990808227536633794","190418686979132769550184236015695571843","100899473828102256462303864156214306867","58202528242484697790685321422825726760","289736610909381211800347176594977834002","120245934794639494673184742810688482871","272481169837524460421144354831020892504","225538509803315073805760619163962178153","26684215014941138069723411944722492123","207250292468187170942755561055130851586","278039867544475858408702055258143543432","255103837418687147291462742860319783367","20199331189816428696641842399905234774","47969736982458472242686882890951808491","206134486480666198975146280935086588064","170535704968050765411299327003414531046","36354854696116142961969127318469400541","112859165488312530976156695207416824154","297656215404388851944041871279729044148","143806582933216053728143448752449288426","274993477637991575353961224648282967","183546027126277335123368127127820177349","202150316702942389760905499863350426795","21950403119735333059383229485548075104","324685877135964149208542064703125880467","235450033724004622968300564999278132482","166120470988169191482931732311044437419","143384931312939688187498703677970384450","30547857852578934966964267370568275422","60734802163025225612268643896699792688","283444091035558502494524064372935156358","138331818620444373549165434481842958154","305227425722790685688672379571563492991","316776472205057843805983638155466066780","2747270478738942734615397163222580615","248467829405510643669389679368976753650","229023723084197302840469528044025201852","209759414108246819968989830911714970704","43690587005908783568967250023094028779","173878891637401591796351459959659712825","20199331189816428696641842399905234774","47969736982458472242686882890951808491","206134486480666198975146280935086588064","170535704968050765411299327003414531046","36354854696116142961969127318469400541","112859165488312530976156695207416824154","297656215404388851944041871279729044148","143806582933216053728143448752449288426","274993477637991575353961224648282967","183546027126277335123368127127820177349","202150316702942389760905499863350426795","21950403119735333059383229485548075104","324685877135964149208542064703125880467","235450033724004622968300564999278132482","166120470988169191482931732311044437419","143384931312939688187498703677970384450","30547857852578934966964267370568275422","60734802163025225612268643896699792688","283444091035558502494524064372935156358","138331818620444373549165434481842958154","305227425722790685688672379571563492991","316776472205057843805983638155466066780","2747270478738942734615397163222580615","248467829405510643669389679368976753650","229023723084197302840469528044025201852","209759414108246819968989830911714970704","43690587005908783568967250023094028779","173878891637401591796351459959659712825","253678141695508181687909857721354722034","289536412061190657387033569260156154774","216642105246729591034404809623665213858","34407323885194804442150450096335089942","48904992127253817796841400673654475972","41679016056898787451142877139376018405","239890312823476036718519397937915103541","229690811538960803568405592066990756656","92920385043170627896630941189817975608","305398971839249972688705065453199659391","108840653558727469948308514488140182756","19187802582235274794942971821126637369","310629061066547293989172210129153208428","4863517247551365049018553688482524165","30155965837885987486067762545511058760","230469856594169066350763000604230252699","261285451134075456469104107365426248025","75732768786857014314543889448115011955","149560383630821412266071810055125548779","86541334601435838692680589156762765712","252022896402143887236774529490105010800","114646061130736448903614571302894420351","203273907285626293397346811126592271022","319618116107447438194874250286608847066","127038940473949296433639685756357866077","158439062896707403057011683625185558209","45927306907014441024242865825213973560","91586139391547538692692137688154900157","253678141695508181687909857721354722034","289536412061190657387033569260156154774","216642105246729591034404809623665213858","34407323885194804442150450096335089942","48904992127253817796841400673654475972","41679016056898787451142877139376018405","239890312823476036718519397937915103541","229690811538960803568405592066990756656","132642218235905715132853493017641096555","243032362984688402878969341603083206956","274396224808451766605562935969941628189","19187802582235274794942971821126637369","310629061066547293989172210129153208428","4863517247551365049018553688482524165","30155965837885987486067762545511058760","230469856594169066350763000604230252699","261285451134075456469104107365426248025","75732768786857014314543889448115011955","149560383630821412266071810055125548779","86541334601435838692680589156762765712","252022896402143887236774529490105010800","114646061130736448903614571302894420351","203273907285626293397346811126592271022","319618116107447438194874250286608847066","127038940473949296433639685756357866077","158439062896707403057011683625185558209","45927306907014441024242865825213973560","91586139391547538692692137688154900157","210038167238432495323443795773941453114","28684807429776611645941757933936495883","306216078015212061309775995255465398859","86216116513889418359744478339605013330","120065202377453028705612939883060221690","23600517734725203319022596692798882625","328024305287579700334194898216270510027","75618071549116882602593874322489345201","100257608782504568834970133724539175562","46939678876171073005538160327254108597","181932149528985921175679627042219365208","169303371170393422806900798204271704618","293029930475476680286712997796241970899","169856255270570565207804087193049652450","14609227815493788976996032181789796935","283932417012546822064083585111084646562","2468755979189109571090056663923956273","119878218115972800712491574486191194040","211390144726635748898036713404478054590","146401763220716739665890298939654476995","228033544357709450266241013196980327493","76188664725227941295905538105705980183","167907386021092240891969783318391945576","128211012123716739247041143277763937250","141229879801057194556923831672678246919","3969018461893605033361681270856208479","223117443655214450915365193921616745605","266257908091652238791630956182586740560","210038167238432495323443795773941453114","28684807429776611645941757933936495883","306216078015212061309775995255465398859","86216116513889418359744478339605013330","120065202377453028705612939883060221690","23600517734725203319022596692798882625","328024305287579700334194898216270510027","75618071549116882602593874322489345201","100257608782504568834970133724539175562","46939678876171073005538160327254108597","181932149528985921175679627042219365208","169303371170393422806900798204271704618","293029930475476680286712997796241970899","169856255270570565207804087193049652450","14609227815493788976996032181789796935","283932417012546822064083585111084646562","2468755979189109571090056663923956273","119878218115972800712491574486191194040","211390144726635748898036713404478054590","146401763220716739665890298939654476995","228033544357709450266241013196980327493","76188664725227941295905538105705980183","167907386021092240891969783318391945576","128211012123716739247041143277763937250","141229879801057194556923831672678246919","3969018461893605033361681270856208479","223117443655214450915365193921616745605","266257908091652238791630956182586740560"],"threshold":0.9},"id":"CVE-2021-29061-52dbc6bd","signature_type":"Line","signature_version":"v1","source":"https://github.com/fracpete/vfsjfilechooser2/commit/9c9f2c317f3de5ece60a3ae28c371e9796e3909b"},{"deprecated":false,"digest":{"function_hash":"61195035484149323887312286309281993885","length":74000},"id":"CVE-2021-29061-d54c7a7a","signature_type":"Function","signature_version":"v1","source":"https://github.com/fracpete/vfsjfilechooser2/commit/9c9f2c317f3de5ece60a3ae28c371e9796e3909b","target":{"file":"src/main/java/com/googlecode/vfsjfilechooser2/utils/VFSURIValidator.java","function":"main"}}]}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}]}