High
Security advisory
A Regular Expression Denial of Service (ReDOS) vulnerability was discovered in Vfsjfilechooser2 version 0.2.9 and below which occurs when the application attempts to validate crafted URIs.
- Products
- Not specified
- Affected versions
- Not specified
- Fixed versions
- Not specified
- CVEs
- CVE-2021-29061
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 31 Oct 2026, 12:42 UTC · Revision 1
Source evidence
A Regular Expression Denial of Service (ReDOS) vulnerability was discovered in Vfsjfilechooser2 version 0.2.9 and below which occurs when the application attempts to validate crafted URIs.
osv:CVE-2021-29061
Complete source record
{
"id": "756f6f733e13a51d86f7eaa290d7f414df3886670864752796d28ce7bef8fcdf",
"url": "https://osv.dev/vulnerability/CVE-2021-29061",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "CVE-2021-29061",
"summary": "A Regular Expression Denial of Service (ReDOS) vulnerability was discovered in Vfsjfilechooser2 version 0.2.9 and below which occurs when the application attempts to validate crafted URIs.",
"evidence": "osv:CVE-2021-29061",
"products": [],
"severity": "high",
"structured": {
"id": "CVE-2021-29061",
"aliases": [
"CVE-2021-29061",
"GHSA-c7fh-chf7-jr5x"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://github.com/fracpete/vfsjfilechooser2",
"type": "GIT",
"events": [
{
"introduced": "0"
},
{
"last_affected": "4483903e098e2d23754d82ec18d3b9ca96f4b3e5"
},
{
"fixed": "9c9f2c317f3de5ece60a3ae28c371e9796e3909b"
}
],
"database_specific": {
"extracted_events": [
{
"cpe": "cpe:2.3:a:vfsjfilechooser2_project:vfsjfilechooser2:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "0"
},
{
"last_affected": "0.2.9"
}
],
"source": "CPE_RANGE"
},
{
"range": [
{
"fixed": "9c9f2c317f3de5ece60a3ae28c371e9796e3909b"
}
],
"source": "REFERENCES_COMMIT"
}
]
}
}
],
"versions": [
"vfsjfilechooser2-0.2.8",
"vfsjfilechooser2-0.2.7",
"vfsjfilechooser2-0.2.5",
"vfsjfilechooser2-0.2.4",
"vfsjfilechooser2-0.2.3",
"vfsjfilechooser2-0.2.2",
"vfsjfilechooser2-0.2.1",
"vfsjfilechooser2-0.2.0",
"vfsjfilechooser2-0.1.0"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-29061.json",
"vanir_signatures": [
{
"id": "CVE-2021-29061-3b8ad845",
"digest": {
"length": 3358,
"function_hash": "32610702540089773096803072955217740217"
},
"source": "https://github.com/fracpete/vfsjfilechooser2/commit/9c9f2c317f3de5ece60a3ae28c371e9796e3909b",
"target": {
"file": "src/main/java/com/googlecode/vfsjfilechooser2/utils/VFSURIValidator.java",
"function": "isValid"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2021-29061-52dbc6bd",
"digest": {
"threshold": 0.9,
"line_hashes": [
"244869542580126931410681563727222122501",
"153571336168327205981627707564121641482",
"321476537301516220365365052765268209565",
"9110560511868757737930664674846768168",
"80754120414743615097299986216006988295",
"85921862642269231728429198427283117335",
"239495029357052874898300204685748182042",
"67707632876582443624306608098368583658",
"266238226859244165319335777148044559823",
"193767746202501483257598017446118144068",
"69334193136768908761299039532894419026",
"226246446131219890157384714451557110618",
"100924157039026309945088741539911711811",
"151087138727002875738094825916986722034",
"212206407369302958730761209122919703859",
"66193971405929343361748456891461537153",
"240143929029892345540630824217179052315",
"21773062490420483382207311110556685016",
"201719443497220780754376732196009665539",
"208955931028228596552149120307703012138",
"18689055968701733283112635087765930007",
"324449211976931607839189247192047777292",
"239094001709492079736620426565775432871",
"228219810643798895728765850503102769029",
"292773457540732900398109511283001163088",
"313318361591312900775466108224551999513",
"240143929029892345540630824217179052315",
"21773062490420483382207311110556685016",
"201719443497220780754376732196009665539",
"208955931028228596552149120307703012138",
"18689055968701733283112635087765930007",
"178440868249314760635774138381707118727",
"100924157039026309945088741539911711811",
"151087138727002875738094825916986722034",
"212206407369302958730761209122919703859",
"66193971405929343361748456891461537153",
"239094001709492079736620426565775432871",
"228219810643798895728765850503102769029",
"292773457540732900398109511283001163088",
"313318361591312900775466108224551999513",
"105438366176732774690607128970751603680",
"204311253227050465295549784580782149265",
"151102769691113396688443192665528369242",
"65473059133970915211186530249050885131",
"8416060986663407041260722425726543517",
"148529897897058997941068817399808948003",
"239359371134789793556228565825795372780",
"297272343394013197146079477136862044985",
"177806496158002302918278179838170525334",
"170089227680092537822635033931617861577",
"200613041932571568421122794594499550607",
"138550086947612660558821583912305881461",
"262347177176801028281808130324554874605",
"271561376556187626665237294531002840564",
"138764524432021133234414984818170524044",
"215651754719008738248765393900278866476",
"270932790881158373120712597011665905605",
"158307492085787207441363527624326039022",
"240593299282072514726665700247009402277",
"213673498316338182696496825081235261013",
"224034662034276397878038657551270483402",
"73031603220105226148456356748742489288",
"285326095043501768083371138829893935549",
"235759759083203128974209913752951539286",
"217543897505461020863280506363521070859",
"145254722851106277097228557307845028546",
"337275519432762692780430558554534759320",
"115770636647153481550990805463515168877",
"105438366176732774690607128970751603680",
"204311253227050465295549784580782149265",
"151102769691113396688443192665528369242",
"65473059133970915211186530249050885131",
"8416060986663407041260722425726543517",
"148529897897058997941068817399808948003",
"239359371134789793556228565825795372780",
"297272343394013197146079477136862044985",
"227176321889590015735272547603583090676",
"79070378376200483477446716719157134066",
"284636449933794612363119831244241591301",
"128484830465295481809702176767001740515",
"157198192245188984413387715331684012969",
"264303218075270657213196770955375791275",
"318755008749466089209442409570690286687",
"320596497052133028037937371323743497313",
"77523513236325732704195209299357202575",
"149950311757209462626945358966027876814",
"51319620374040374353458927009652564013",
"51408790787901322081058348271545466095",
"175183044569201012628268119605583944891",
"201921306828281402080371842578709947142",
"7888567567143188753723257835301301464",
"282114608858529842347084086023474119079",
"300610202092338315152990808227536633794",
"190418686979132769550184236015695571843",
"100899473828102256462303864156214306867",
"58202528242484697790685321422825726760",
"289736610909381211800347176594977834002",
"120245934794639494673184742810688482871",
"272481169837524460421144354831020892504",
"225538509803315073805760619163962178153",
"26684215014941138069723411944722492123",
"207250292468187170942755561055130851586",
"278039867544475858408702055258143543432",
"255103837418687147291462742860319783367",
"227176321889590015735272547603583090676",
"79070378376200483477446716719157134066",
"284636449933794612363119831244241591301",
"128484830465295481809702176767001740515",
"157198192245188984413387715331684012969",
"264303218075270657213196770955375791275",
"318755008749466089209442409570690286687",
"320596497052133028037937371323743497313",
"77523513236325732704195209299357202575",
"149950311757209462626945358966027876814",
"51319620374040374353458927009652564013",
"51408790787901322081058348271545466095",
"175183044569201012628268119605583944891",
"201921306828281402080371842578709947142",
"7888567567143188753723257835301301464",
"282114608858529842347084086023474119079",
"300610202092338315152990808227536633794",
"190418686979132769550184236015695571843",
"100899473828102256462303864156214306867",
"58202528242484697790685321422825726760",
"289736610909381211800347176594977834002",
"120245934794639494673184742810688482871",
"272481169837524460421144354831020892504",
"225538509803315073805760619163962178153",
"26684215014941138069723411944722492123",
"207250292468187170942755561055130851586",
"278039867544475858408702055258143543432",
"255103837418687147291462742860319783367",
"20199331189816428696641842399905234774",
"47969736982458472242686882890951808491",
"206134486480666198975146280935086588064",
"170535704968050765411299327003414531046",
"36354854696116142961969127318469400541",
"112859165488312530976156695207416824154",
"297656215404388851944041871279729044148",
"143806582933216053728143448752449288426",
"274993477637991575353961224648282967",
"183546027126277335123368127127820177349",
"202150316702942389760905499863350426795",
"21950403119735333059383229485548075104",
"324685877135964149208542064703125880467",
"235450033724004622968300564999278132482",
"166120470988169191482931732311044437419",
"143384931312939688187498703677970384450",
"30547857852578934966964267370568275422",
"60734802163025225612268643896699792688",
"283444091035558502494524064372935156358",
"138331818620444373549165434481842958154",
"305227425722790685688672379571563492991",
"316776472205057843805983638155466066780",
"2747270478738942734615397163222580615",
"248467829405510643669389679368976753650",
"229023723084197302840469528044025201852",
"209759414108246819968989830911714970704",
"43690587005908783568967250023094028779",
"173878891637401591796351459959659712825",
"20199331189816428696641842399905234774",
"47969736982458472242686882890951808491",
"206134486480666198975146280935086588064",
"170535704968050765411299327003414531046",
"36354854696116142961969127318469400541",
"112859165488312530976156695207416824154",
"297656215404388851944041871279729044148",
"143806582933216053728143448752449288426",
"274993477637991575353961224648282967",
"183546027126277335123368127127820177349",
"202150316702942389760905499863350426795",
"21950403119735333059383229485548075104",
"324685877135964149208542064703125880467",
"235450033724004622968300564999278132482",
"166120470988169191482931732311044437419",
"143384931312939688187498703677970384450",
"30547857852578934966964267370568275422",
"60734802163025225612268643896699792688",
"283444091035558502494524064372935156358",
"138331818620444373549165434481842958154",
"305227425722790685688672379571563492991",
"316776472205057843805983638155466066780",
"2747270478738942734615397163222580615",
"248467829405510643669389679368976753650",
"229023723084197302840469528044025201852",
"209759414108246819968989830911714970704",
"43690587005908783568967250023094028779",
"173878891637401591796351459959659712825",
"253678141695508181687909857721354722034",
"289536412061190657387033569260156154774",
"216642105246729591034404809623665213858",
"34407323885194804442150450096335089942",
"48904992127253817796841400673654475972",
"41679016056898787451142877139376018405",
"239890312823476036718519397937915103541",
"229690811538960803568405592066990756656",
"92920385043170627896630941189817975608",
"305398971839249972688705065453199659391",
"108840653558727469948308514488140182756",
"19187802582235274794942971821126637369",
"310629061066547293989172210129153208428",
"4863517247551365049018553688482524165",
"30155965837885987486067762545511058760",
"230469856594169066350763000604230252699",
"261285451134075456469104107365426248025",
"75732768786857014314543889448115011955",
"149560383630821412266071810055125548779",
"86541334601435838692680589156762765712",
"252022896402143887236774529490105010800",
"114646061130736448903614571302894420351",
"203273907285626293397346811126592271022",
"319618116107447438194874250286608847066",
"127038940473949296433639685756357866077",
"158439062896707403057011683625185558209",
"45927306907014441024242865825213973560",
"91586139391547538692692137688154900157",
"253678141695508181687909857721354722034",
"289536412061190657387033569260156154774",
"216642105246729591034404809623665213858",
"34407323885194804442150450096335089942",
"48904992127253817796841400673654475972",
"41679016056898787451142877139376018405",
"239890312823476036718519397937915103541",
"229690811538960803568405592066990756656",
"132642218235905715132853493017641096555",
"243032362984688402878969341603083206956",
"274396224808451766605562935969941628189",
"19187802582235274794942971821126637369",
"310629061066547293989172210129153208428",
"4863517247551365049018553688482524165",
"30155965837885987486067762545511058760",
"230469856594169066350763000604230252699",
"261285451134075456469104107365426248025",
"75732768786857014314543889448115011955",
"149560383630821412266071810055125548779",
"86541334601435838692680589156762765712",
"252022896402143887236774529490105010800",
"114646061130736448903614571302894420351",
"203273907285626293397346811126592271022",
"319618116107447438194874250286608847066",
"127038940473949296433639685756357866077",
"158439062896707403057011683625185558209",
"45927306907014441024242865825213973560",
"91586139391547538692692137688154900157",
"210038167238432495323443795773941453114",
"28684807429776611645941757933936495883",
"306216078015212061309775995255465398859",
"86216116513889418359744478339605013330",
"120065202377453028705612939883060221690",
"23600517734725203319022596692798882625",
"328024305287579700334194898216270510027",
"75618071549116882602593874322489345201",
"100257608782504568834970133724539175562",
"46939678876171073005538160327254108597",
"181932149528985921175679627042219365208",
"169303371170393422806900798204271704618",
"293029930475476680286712997796241970899",
"169856255270570565207804087193049652450",
"14609227815493788976996032181789796935",
"283932417012546822064083585111084646562",
"2468755979189109571090056663923956273",
"119878218115972800712491574486191194040",
"211390144726635748898036713404478054590",
"146401763220716739665890298939654476995",
"228033544357709450266241013196980327493",
"76188664725227941295905538105705980183",
"167907386021092240891969783318391945576",
"128211012123716739247041143277763937250",
"141229879801057194556923831672678246919",
"3969018461893605033361681270856208479",
"223117443655214450915365193921616745605",
"266257908091652238791630956182586740560",
"210038167238432495323443795773941453114",
"28684807429776611645941757933936495883",
"306216078015212061309775995255465398859",
"86216116513889418359744478339605013330",
"120065202377453028705612939883060221690",
"23600517734725203319022596692798882625",
"328024305287579700334194898216270510027",
"75618071549116882602593874322489345201",
"100257608782504568834970133724539175562",
"46939678876171073005538160327254108597",
"181932149528985921175679627042219365208",
"169303371170393422806900798204271704618",
"293029930475476680286712997796241970899",
"169856255270570565207804087193049652450",
"14609227815493788976996032181789796935",
"283932417012546822064083585111084646562",
"2468755979189109571090056663923956273",
"119878218115972800712491574486191194040",
"211390144726635748898036713404478054590",
"146401763220716739665890298939654476995",
"228033544357709450266241013196980327493",
"76188664725227941295905538105705980183",
"167907386021092240891969783318391945576",
"128211012123716739247041143277763937250",
"141229879801057194556923831672678246919",
"3969018461893605033361681270856208479",
"223117443655214450915365193921616745605",
"266257908091652238791630956182586740560"
]
},
"source": "https://github.com/fracpete/vfsjfilechooser2/commit/9c9f2c317f3de5ece60a3ae28c371e9796e3909b",
"target": {
"file": "src/main/java/com/googlecode/vfsjfilechooser2/utils/VFSURIValidator.java"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2021-29061-d54c7a7a",
"digest": {
"length": 74000,
"function_hash": "61195035484149323887312286309281993885"
},
"source": "https://github.com/fracpete/vfsjfilechooser2/commit/9c9f2c317f3de5ece60a3ae28c371e9796e3909b",
"target": {
"file": "src/main/java/com/googlecode/vfsjfilechooser2/utils/VFSURIValidator.java",
"function": "main"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
}
],
"vanir_signatures_modified": "2026-10-20T14:20:30Z"
}
}
],
"modified": "2026-10-20T14:20:30.995549555Z",
"provider": "osv",
"references": [
"https://github.com/fracpete/vfsjfilechooser2/releases/tag/vfsjfilechooser2-0.2.9",
"https://github.com/fracpete/vfsjfilechooser2/issues/7",
"https://github.com/fracpete/vfsjfilechooser2/commit/9c9f2c317f3de5ece60a3ae28c371e9796e3909b",
"https://github.com/yetingli/PoCs/blob/main/CVE-2021-29061/Vfsjfilechooser2.md",
"https://github.com/yetingli/SaveResults/blob/main/md/vfsjfilechooser2.md"
],
"provider_metadata": {}
},
"related_cves": [
{
"value": "CVE-2021-29061",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 388812,
"published_at": "2021-06-21T20:15:09.437+00:00"
}