The vulnerability of the JavaScript library for secure cleaning and protection of HTML code, DOMPurify, is related to the use of a regular expression with inefficient computational complexity, allowing attackers to execute XSS attacks.

The vulnerability of the JavaScript library for secure cleaning and protection of HTML code, DOMPurify, is related to the use of a regular expression with inefficient computational complexity. Exploiting this vulnerability could allow an attacker who operates remotely to carry out XSS attacks...

GHSA-5J4C-8P2G-V4JX ReDoS vulnerability in vue package that is exploitable through inefficient regex evaluation in the parseHTML function

The ReDoS can be exploited through the parseHTML function in the html-parser.ts file. This flaw allows attackers to slow down the application by providing specially crafted input that causes inefficient processing of regular expressions, leading to excessive resource consumption. To demonstrate...

The vulnerability of the ng-srcset component in the application design and development environment for Angular applications allows attackers to trigger a service failure.

The vulnerability of the ng-srcset component in the application design and development environment for Angular is related to the use of a regular expression with inefficient computational complexity. Exploiting this vulnerability could allow an attacker to cause service failures remotely...

Regular Expression Denial Of Service (ReDoS)

s3-url-parser is vulnerable to Regular Expression Denial Of Service ReDoS. The vulnerability is due to a regex with inefficient complexity, allowing an attacker to craft long s3 URLS that triggers excessive resource consumption, leading to denial of service...

The vulnerability of the lines_with_leading_tabs_expanded() function in the strings.py file of the Python coding formatting tool Black allows a attacker to cause a service failure.

The vulnerability of the lineswithleadingtabsexpanded function in the strings.py file of the Python coding formatting tool Black is related to the use of a regular expression c with inefficient computational complexity. Exploiting this vulnerability could allow an attacker to trigger a service...

The vulnerability of the Rack module in the Ruby programming language lies in the use of a regular expression with high computational complexity, which allows attackers to trigger a service failure.

The vulnerability of the Ruby interpreter’s Rack module is related to the incorrect handling of invalid URL addresses. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the Rack module in the Ruby programming language lies in the use of a regular expression with high computational complexity, which allows attackers to trigger a service failure.

The vulnerability of the Ruby interpreter’s Rack module is related to the incorrect handling of invalid URL addresses. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Regular Expression Denial Of Service (ReDoS)

Axios is vulnerable to Regular Expression Denial of Service ReDoS. This vulnerability is due to the use of a regex with inefficient time complexity when parsing URLS with many / characters within the combineURLs method. This vulnerability results in Denial of Service if an attacker can manipulate...

The vulnerability in the file pygments/lexers/smithy.py of the SmithyLexer component of the Pygments syntax highlighter allows a hacker to cause a service failure.

The vulnerability in the pygments/lexers/smithy.py file of the SmithyLexer component of the Pygments syntax highlighter is related to the use of a regular expression with inefficient computational complexity. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the `sanitize_html` function in Ruby Redcloth software allows a hacker to cause a service failure.

The vulnerability of the sanitizehtml function in Ruby Redcloth text processing software is related to the use of a regular expression with inefficient computational complexity. Exploiting this vulnerability could allow an attacker to cause service interruptions remotely...

The vulnerability of the $resource service in the Angular application and single-page application development platforms, related to the use of a regular expression with inefficient computational complexity, allows attackers to trigger service failures.

The vulnerability of the application development environment and the Angular single-page application platform is related to the use of a regular expression with inefficient computational complexity. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerability of the $resource service in the Angular application and single-page application development platform allows a attacker to cause a service failure.

The vulnerability of the $resource service in the Angular application and single-page application development platforms is related to the use of a regular expression with inefficient computational complexity. Exploiting this vulnerability could allow an attacker to cause service failures remotely...

The vulnerability of the Node.js software platform’s word-wrap module allows attackers to trigger a denial-of-service attack.

The vulnerability of the Node.js software platform’s word-wrap module is related to the use of a regular expression with inefficient computational complexity. Exploiting this vulnerability could allow an attacker to cause service failures remotely...

The vulnerability of the input[url] function in the application development environment and the Angular platform allows attackers to trigger a service failure.

The vulnerability of the inputurl function in the application development environment and the Angular platform is related to the use of a regular expression with inefficient computational complexity. Exploiting this vulnerability could allow an attacker to cause service failures remotely...

Regular Expression Denial Of Service (ReDoS)

uri is vulnerable to Regular Expression Denial Of Service ReDoS. The vulnerability exists due to inefficient Regex pattern complexity used in rfc2396parser.rb and rfc3986parser.rb., which allows an attacker to crash the application by providing maliciously crafted URI patterns. NOTE: This issue...

SUSE SLES15: bind / bind-chrootenv / bind-devel / bind-devel-32bit / bind-doc / etc (SUSE-SU-2023:2578-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:2578-1 advisory. bind: - Provide bind dependencies and solve installation issues on SUSE Linux Enterprise Micro - There are no source...

PT-2023-4760

Name of the Vulnerable Software and Affected Versions word-wrap versions all Description The issue is related to the use of a regular expression with inefficient computational complexity in the word-wrap module of the Node.js platform. This can be exploited by a remote attacker to cause a denial ...

Regular Expression Denial Of Service (ReDoS)

RedCloth is vulnerable to Regular Expression Denial Of Service ReDoS. The vulnerability exists in the cleanhtml function of html.rb due to inefficient regular expressions complexity, leading to long parsing times or an application crash...

rubygem-rails-html-sanitizer: Inefficient Regular Expression leading to denial of service

An inefficient Regular Expression vulnerability was found in rubygem rails-html-sanitizer. Certain configurations are susceptible to excessive backtracking, leading to a denial of service through CPU resource consumption...

Regular Expression Denial Of Service (ReDoS)

sqlparse is vulnerable to Regular Expression Denial of Service ReDoS. The vulnerability exists due to inefficient regular expression complexity in the lexer.py regex element which allows an attacker to crash the application by submitting maliciously crafted input...