PYSEC-2021-325

Flask-RESTX pypi package flask-restx is a community driven fork of Flask-RESTPlus. Flask-RESTX before version 0.5.1 is vulnerable to ReDoS Regular Expression Denial of Service in emailregex. This is fixed in version 0.5.1...

CVE-2021-3795

A flaw was found in the semver-regex library where it could lead to consuming a big amount of resources when executing specific strings. Attackers could take advantage of this by crafting an invalid version causing a disruption or a denial of service DoS...

PYSEC-2021-333

sqlparse is a non-validating SQL parser module for Python. In sqlparse versions 0.4.0 and 0.4.1 there is a regular Expression Denial of Service in sqlparse vulnerability. The regular expression may cause exponential backtracking on strings containing many repetitions of '\r\n' in SQL comments. On...

UBUNTU-CVE-2021-32839

sqlparse is a non-validating SQL parser module for Python. In sqlparse versions 0.4.0 and 0.4.1 there is a regular Expression Denial of Service in sqlparse vulnerability. The regular expression may cause exponential backtracking on strings containing many repetitions of '\r\n' in SQL comments. On...

PYSEC-2021-333

sqlparse is a non-validating SQL parser module for Python. In sqlparse versions 0.4.0 and 0.4.1 there is a regular Expression Denial of Service in sqlparse vulnerability. The regular expression may cause exponential backtracking on strings containing many repetitions of '\r\n' in SQL comments. On...

Design/Logic Flaw

sqlparse is a non-validating SQL parser module for Python. In sqlparse versions 0.4.0 and 0.4.1 there is a regular Expression Denial of Service in sqlparse vulnerability. The regular expression may cause exponential backtracking on strings containing many repetitions of '\r\n' in SQL comments. On...

CVE-2021-32839

CVE-2021-32839 affects the Python package sqlparse . The vulnerability is a ReDoS in the StripComments regex used by the formatting path for removing comments, causing exponential backtracking on strings containing many repetitions of '\r\n' in SQL comments in versions 0.4.0 and 0.4.1. The issue ...

Regular Expression Denial Of Service (ReDoS)

ansi-regex is vulnerable to regular expression denial of service. The vulnerability exists due to an inefficient handling of user-provided string pattern, causing intensive processing of regular expression machine and application crash...

Host Authorization Framework Ruby on Rails Information Disclosure

The vulnerability in the Host Authorization framework of the actionpack ruby gem in the Ruby on Rails software platform relates to the conversion of strings in config.hosts without a starting point, into regular expressions without encapsulation. Exploiting this vulnerability can allow an attacke...

CVE-2021-3807

ansi-regex is vulnerable to Inefficient Regular Expression Complexity...

DEBIAN-CVE-2021-3807

ansi-regex is vulnerable to Inefficient Regular Expression Complexity...

CVE-2021-3807

ansi-regex is vulnerable to Inefficient Regular Expression Complexity...

CVE-2021-3810

code-server is vulnerable to Inefficient Regular Expression Complexity...

CVE-2021-3807

ansi-regex is vulnerable to Inefficient Regular Expression Complexity...

UBUNTU-CVE-2021-3807

ansi-regex is vulnerable to Inefficient Regular Expression Complexity...

CVE-2021-3807

ansi-regex is vulnerable to Inefficient Regular Expression Complexity...

CVE-2021-3810

CVE-2021-3810: code-server is vulnerable to Inefficient Regular Expression Complexity. The CVE has a high base impact (CVSS v3.1: 7.5, NETWORK, LOW attack complexity, no user interaction) in the NVD/NVDC entries; other mirrors (OSV, Red Hat, GHSA) corroborate the same issue. The connected records...

CVE-2021-3807

ansi-regex is vulnerable to Inefficient Regular Expression Complexity...

abt.api.web (0.0.3) potentially affected by CVE-2021-3807 via ansi-regex (3.0.0)

ansi-regex NPM version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on ansi-regex and may be impacted: - abt.api.web 0.0.3 Source cves: CVE-2021-3807 Source advisory: MEND:CVE-2021-3807...

@codedungeon/gunner (>=0.38.0, <=0.80.1), @codedungeon/laravel-versions-cli (0.1.0) +22 more potentially affected by CVE-2021-3807 via ansi-regex (>=4.0.0, <=4.1.0)

ansi-regex NPM version =4.0.0, =0.38.0, =0.0.65, =0.0.0, =0.0.41, =0.0.12, =0.0.0, =0.2.0, =3.3.69, =0.0.3, =0.2.11, =5.1.0, =4.0.58, =3.0.58, =6.0.17, =6.1.110 and more Source cves: CVE-2021-3807 Source advisory: MEND:CVE-2021-3807...