AIKIDO-2026-356467
cxxheaderparser is vulnerable to Denial of Service (DoS)
37
Low Risk
This Affects:
cxxheaderparserTL;DR
cxxheaderparser parses C++ header files into Python data structures. When a single physical line contains many comma-separated declarators, fields, variables, or enumerators, the parser processes that line with quadratic cost relative to the number of items. Supplying a header of only tens of kilobytes with such dense single-line declarations forces prolonged CPU consumption and stalls parsing, causing denial of service. The fix reworks the parsing so declarations packed on one line no longer incur quadratic processing time.
Who does this affect?
You are affected if you are using a version that falls within the vulnerable range and you use it to parse untrusted or externally supplied C++ headers.
Background info
cxxheaderparser is vulnerable to Denial of Service (DoS) in versions 0.0.1 - 1.9.1.
How to fix this
Upgrade the cxxheaderparser library to the patch version.
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant