13419 matches found
Incorrect Regular Expression
Overview Affected versions of this package are vulnerable to Incorrect Regular Expression in the escapeRegex function in index.js, which escapes , , /, , , , +, ?, ., and $ but leaves ^, |, , , and intact, and whose output is joined into the alternation that the RedirectableRequest constructor...
Incorrect Regular Expression
Overview Affected versions of this package are vulnerable to Incorrect Regular Expression in the escapeRegex function in index.js, which escapes , , /, , , , +, ?, ., and $ but leaves ^, |, , , and intact, and whose output is joined into the alternation that the RedirectableRequest constructor...
Security Bulletin: Vulnerabilities in netty-codec-http,spring-core,brace-expandsion,netty-transport,log4j-core,spring-expression,js-cookie,spring-security,spring-cloud,spring-boot,spring-hateoas might affect IBM Storage Defender Copy Data Management
Summary IBM Storage Defender Copy Data Management can be affected by vulnerabilities in netty-codec-http,spring-core,brace-expandsion,netty-transport,log4j-core,spring-expression,js-cookie,spring-security,spring-cloud,spring-boot,spring-hateoas. Vulnerabilities include resource exhaustion and...
EUVD-2026-88378
Axios: ReDoS in fromDataURI data: URL parser freezes the Node event loop DoS...
EUVD-2026-88383
Axios: ReDoS ON² in shouldBypassProxy host normalization, reachable via untrusted redirect Location...
SUSE CVE-2026-103111
PCRE2 before 10.49, when there is an attacker-controlled regular expression and certain JIT API usage, allows an out-of-bounds write with arbitrary data...
EUVD-2026-88537
PyJWT: ReDoS vulnerability when calling the ispemformat function...
AZL-105834 CVE-2026-103111 affecting package rust for versions less than 1.75.0-30
PCRE2 before 10.49, when there is an attacker-controlled regular expression and certain JIT API usage, allows an out-of-bounds write with arbitrary data...
DEBIAN-CVE-2026-103111
PCRE2 before 10.49, when there is an attacker-controlled regular expression and certain JIT API usage, allows an out-of-bounds write with arbitrary data...
AZL-105882 CVE-2026-103111 affecting package rust 1.96.1-2
PCRE2 before 10.49, when there is an attacker-controlled regular expression and certain JIT API usage, allows an out-of-bounds write with arbitrary data...
AZL-105381 CVE-2026-103111 affecting package ripgrep 13.0.0-14
PCRE2 before 10.49, when there is an attacker-controlled regular expression and certain JIT API usage, allows an out-of-bounds write with arbitrary data...
AZL-105639 CVE-2026-103111 affecting package php 8.3.33-1
PCRE2 before 10.49, when there is an attacker-controlled regular expression and certain JIT API usage, allows an out-of-bounds write with arbitrary data...
ALPINE-CVE-2026-103111
PCRE2 before 10.49, when there is an attacker-controlled regular expression and certain JIT API usage, allows an out-of-bounds write with arbitrary data...
CVE-2026-103111
PCRE2 before 10.49, when there is an attacker-controlled regular expression and certain JIT API usage, allows an out-of-bounds write with arbitrary data...
UBUNTU-CVE-2026-103111
PCRE2 before 10.49, when there is an attacker-controlled regular expression and certain JIT API usage, allows an out-of-bounds write with arbitrary data...
EUVD-2026-89608
PCRE2 before 10.49, when there is an attacker-controlled regular expression and certain JIT API usage, allows an out-of-bounds write with arbitrary data...
CVE-2026-103111
PCRE2 before 10.49, when there is an attacker-controlled regular expression and certain JIT API usage, allows an out-of-bounds write with arbitrary data...
CVE-2026-103111
The PCRE2 library, specifically versions prior to 10.49 , is vulnerable to an out-of-bounds write with arbitrary data. This flaw occurs when an application processes attacker-controlled regular expressions using specific Just-In-Time (JIT) compiler interfaces . A successful exploit could allow an...
EUVD-2026-89484
anchorme through 3.0.8 contains a regular expression denial of service vulnerability in the IPv6 host extraction regex due to catastrophic backtracking. Attackers can supply specially crafted input strings with repeated patterns to cause exponential regex engine backtracking, blocking the Node.js...
CVE-2026-103111: Out-of-bounds Write
PCRE2 before 10.49, when there is an attacker-controlled regular expression and certain JIT API usage, allows an out-of-bounds write with arbitrary data...