Status
Impact
Microsoft Knack 0.12.0 allows Regular expression Denial of Service (ReDoS) in the knack.introspection module. We’ll need to wait until the upstream project releases a patched version. Once that’s available, we can proceed with the upgrade and remediate the CVE.