Regexploit - Find Regular Expressions Which Are Vulnerable To ReDoS (Regular Expression Denial Of Service)

🗓️ 20 Jul 2021 12:30:00Reported by KitPloitType

Find regexes vulnerable to ReDoS. Default regex parsers can have unbounded worst-case complexity causing denial of service and catastrophic backtracking. Tool identifies vulnerable regexes and provides examples

Reporter	Title	Published	Views	Family All 1005
vulnersOsv	02-infrastructure (=1.0.0), 02vue_toast_demo (>=1.0.0 <=1.0.4) +11734 more potentially affected by CVE-2021-28092 +1 more via is-svg (>=2.1.0 <=4.2.2)	17 Mar 202117:53	–	vulnersosv
vulnersOsv	02-infrastructure (=1.0.0), 02vue_toast_demo (>=1.0.0 <=1.0.4) +11729 more potentially affected by CVE-2021-28092 via is-svg (>=2.1.0 <=4.2.1)	19 Mar 202121:25	–	vulnersosv
vulnersOsv	buildbot-badges (>=1.7.0 <=1.8.2), cico (>=0.1.0 <=0.1.8) +9 more potentially affected by CVE-2021-21236 via cairosvg (>=0.5.0 <=2.5.0)	6 Jan 202117:15	–	vulnersosv
vulnersOsv	@acanto/october-scripts (=3.2.2), @acanto/workflow (=5.1.0) +271 more potentially affected by CVE-2021-27292 via ua-parser-js (>=0.7.14 <=0.7.23)	6 May 202116:11	–	vulnersosv
vulnersOsv	aequitas (>=0.26.0 <=0.42.0), askbot (=0.12.3) +29 more potentially affected by CVE-2021-26813 via markdown2 (>=2.3.0 <=2.3.9)	2 Jun 202121:44	–	vulnersosv
vulnersOsv	buildbot-badges (>=1.7.0 <=1.8.2), cico (>=0.1.0 <=0.1.8) +9 more potentially affected by CVE-2021-21236 via cairosvg (>=0.5.0 <=2.5.0)	6 Jan 202116:57	–	vulnersosv
vulnersOsv	aequitas (>=0.26.0 <=0.42.0), askbot (=0.12.3) +29 more potentially affected by CVE-2021-26813 via markdown2 (>=2.3.0 <=2.3.9)	3 Mar 202116:15	–	vulnersosv
IBM Security Bulletins	Security Bulletin: Vulnerabilities in the Linux Kernel, Samba, Sudo, Python, and tcmu-runner affect IBM Spectrum Protect Plus	6 May 202202:35	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM Rational® Application Developer for WebSphere® Software - September 2021	30 Sep 202115:00	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Dashboards on Cloud Pak for Data has addressed security vulnerabilities	27 Feb 202513:56	–	ibm

Source	Link
github	www.github.com/python-pillow/Pillow/commit/3bce145966374dd39ce58a6fc0083f8d1890719c
github	www.github.com/Python-Markdown/markdown/pull/1130
github	www.github.com/python/cpython/commit/0b297d4ff1c0e4480ad33acae793fbaf4bf015b4
github	www.github.com/NuGet/NuGet.Client/commit/a0671e946ce71dc59def5cc8a67c6457d66f33bf
camo	www.camo.githubusercontent.com/604dfb1a1bfac98d0048f363e0e6d65bd88b4fdbd57f5b001a8f76ea580c1097/68747470733a2f2f646f79656e7365632e636f6d2f696d616765732f6c6f676f2e737667
github	www.github.com/python/cpython/pull/17157
github	www.github.com/pygments/pygments/commit/2e7e8c4a7b318f4032493773732754e418279a14
github	www.github.com/ua-parser/uap-core/security/advisories/GHSA-cmcx-xhr8-3w9p
github	www.github.com/trentm/python-markdown2/pull/387
github	www.github.com/advisories/GHSA-hq37-853p-g5cf

20 Jul 2021 12:30Current

7.7High risk

Vulners AI Score7.7

CVSS 3.17.5

CVSS 25

EPSS0.06449