The version in Debian suffers from a regex vulnerability. The issue has been
fixed in python3-validators 0.21.0.

Latest available upstream version is 0.22.0.

We believe that the bug you reported is fixed in the latest version of
validators, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1054560@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Petter Reinholdtsen <pere@debian.org> (supplier of updated validators package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
Format: 1.8
Date: Tue, 28 Jul 2026 22:29:45 +0200
Source: validators
Architecture: source
Version: 0.28.3-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Python Team <team+python@tracker.debian.org>
Changed-By: Petter Reinholdtsen <pere@debian.org>
Closes: 1054560 1142948
Changes:
 validators (0.28.3-1) unstable; urgency=medium
 .
   * Team upload.
 .
   * New upstream version 0.28.3.
    - Now support validators.hostname() (Closes: #1142948).
    - Fixes regex DoS issue (Closes: #1054560).
   * Update standards version to 4.7.4, no changes needed.
Checksums-Sha1:
 73ac0faba0b3aa3b4eedbc98580458715512f6e5 2082 validators_0.28.3-1.dsc
 c5725a36953259ab4252dd58f182597d77df7e11 110456 validators_0.28.3.orig.tar.gz
 c6692e5b2375cd1a3e7fc475889e958bbbbec855 3392 validators_0.28.3-1.debian.tar.xz
 b4d2cf096721c42b5c802a53810996a20fe7c519 7116 validators_0.28.3-1_source.buildinfo
Checksums-Sha256:
 af88012670ae8724ca865db624b5175ed5bb0aaa2d915bc2f0b90813065b4b2b 2082 validators_0.28.3-1.dsc
 2fc1849c8913f4d4270d74542385d0a2529b36ccbab74ab3d96813f4798511da 110456 validators_0.28.3.orig.tar.gz
 e8942c14269027a5ce49787035a9fea4d8702fbdd534de26278bc98f4294279d 3392 validators_0.28.3-1.debian.tar.xz
 8fa03a2f48308d1893a057b2cb903c100aa8f36010eb2581863c463530ad427c 7116 validators_0.28.3-1_source.buildinfo
Files:
 bfb46f64b8d3569cf73068a90adfa2ab 2082 python optional validators_0.28.3-1.dsc
 2fa491b3a3d9531b1d079fd6a2e17144 110456 python optional validators_0.28.3.orig.tar.gz
 612474bf63a390b3e07613de967a0740 3392 python optional validators_0.28.3-1.debian.tar.xz
 f5e5fdc215e5d85ee97187ca315c864f 7116 python optional validators_0.28.3-1_source.buildinfo
-----BEGIN PGP SIGNATURE-----
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=ajbj
-----END PGP SIGNATURE-----