CVE-2021-27293: Restsharp

High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days.

RestSharp < 106.11.8-alpha.0.13 uses a regular expression which is vulnerable to Regular Expression Denial of Service (ReDoS) when converting strings into DateTimes. If a server responds with a malicious string, the client using RestSharp will be stuck processing it for an exceedingly long time. Thus the remote server can trigger Denial of Service.

Affected products

• Restsharp Restsharp: up to and including 106.11.7; version 106.11.8 only

Published 2021-07-12. Last modified 2026-06-17.